Search

Find a vulnerability

Search criteria

    30 vulnerabilities found for g5_5500_firmware by dell

    CVE-2023-43078 (GCVE-0-2023-43078)

    Vulnerability from nvd – Published: 2024-08-28 05:33 – Updated: 2024-08-28 22:31
    VLAI
    Summary
    Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installation resulting in arbitrary folder deletion, which could lead to Privilege Escalation or Denial of Service.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2024-08-28 14:17 UTC
    CWE
    • CWE-59 - Improper Link Resolution Before File Access ('Link Following')
    Assigner
    dell CNA under the mitre root
    CNA scorecard C 70/100 over 459 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Dell Dell Client Platform, Dell Dock Firmware Affected: N/A , < 1.27.0 (semver)
    Affected: N/A , < 1.22.0 (semver)
    Affected: N/A , < 1.14.1 (semver)
    Affected: N/A , < 1.11.0 (semver)
    Affected: N/A , < 1.19.0 (semver)
    Affected: N/A , < 1.20.0 (semver)
    Affected: N/A , < 1.24.0 (semver)
    Affected: N/A , < 1.26.0 (semver)
    Affected: N/A , < 1.12.0 (semver)
    Affected: N/A , < 1.28.0 (semver)
    Affected: N/A , < 1.17.0 (semver)
    Affected: N/A , < 1.23.0 (semver)
    Affected: N/A , < 1.30.0 (semver)
    Affected: N/A , < 2.25.0 (semver)
    Affected: N/A , < 1.16.0 (semver)
    Affected: N/A , < 1.12.1 (semver)
    Affected: N/A , < 2.24.0 (semver)
    Affected: N/A , < 1.8.0 (semver)
    Affected: N/A , < 1.18.0 (semver)
    Affected: N/A , < 1.29.0 (semver)
    Affected: N/A , < 1.24.1 (semver)
    Affected: N/A , < 1.22.1 (semver)
    Affected: N/A , < 1.31.0 (semver)
    Affected: N/A , < 1.25.0 (semver)
    Affected: N/A , < 1.10.0 (semver)
    Affected: N/A , < 1.34.0 (semver)
    Affected: N/A , < 1.32.0 (semver)
    Affected: N/A , < 1.36.0 (semver)
    Affected: N/A , < 1.10.1 (semver)
    Affected: N/A , < 1.36.2 (semver)
    Affected: N/A , < 1.21.1 (semver)
    Affected: N/A , < 1.33.0 (semver)
    Affected: N/A , < 1.35.0 (semver)
    Affected: N/A , < 1.34.2 (semver)
    Affected: N/A , < 1.30.1 (semver)
    Affected: N/A , < 1.15.0 (semver)
    Affected: N/A , < 2.22.0 (semver)
    Affected: N/A , < 2.16.0 (semver)
    Affected: N/A , < 1.22.2 (semver)
    Affected: N/A , < 1.1.37 (semver)
    Affected: N/A , < 1.27.1 (semver)
    Affected: N/A , < 3.3.2 (semver)
    Affected: N/A , < 1.28.1 (semver)
    Affected: N/A , < 2.11.1 (semver)
    Affected: N/A , < 2.28.0 (semver)
    Affected: N/A , < 1.28.8 (semver)
    Affected: N/A , < 1.1.16 (semver)
    Affected: N/A , < 1.20.1 (semver)
    Affected: N/A , < 1.9.0 (semver)
    Affected: N/A , < 1.6.1 (semver)
    Affected: N/A , < 1.1.15 (semver)
    Affected: N/A , < 2.23.0 (semver)
    Affected: N/A , < 3.20.0 (semver)
    Affected: N/A , < 1.19.1 (semver)
    Affected: N/A , < 2.9.0 (semver)
    Affected: N/A , < 1.13.0 (semver)
    Affected: N/A , < 1.0.14.20 (semver)
    Affected: N/A , < 01.00.15 (semver)
    Affected: N/A , < 01.00.36 (semver)
    Affected: N/A , < 4.62.156.006 (semver)
    Affected: N/A , < 4.66.128.015 (semver)
    Affected: N/A , < 4.65.111.022 (semver)
    Affected: N/A , < 4.61.124.014 (semver)
    Affected: N/A , < 4.46.147.004 (semver)
    Affected: N/A , < 4.46.134.013 (semver)
    Affected: N/A , < 4.66.131.016 (semver)
    Affected: N/A , < 4.46.135.009 (semver)
    Affected: N/A , < 4.65.162.003 (semver)
    Affected: N/A , < 4.65.119.017 (semver)
    Affected: N/A , < 4.62.140.014 (semver)
    Affected: N/A , < 4.46.166.001 (semver)
    Affected: N/A , < 4.65.163.002 (semver)
    Affected: N/A , < 4.62.139.013 (semver)
    Affected: N/A , < 4.46.112.015 (semver)
    Affected: N/A , < 4.65.116.019 (semver)
    Affected: N/A , < 4.46.143.009 (semver)
    Affected: N/A , < 4.46.145.004 (semver)
    Affected: N/A , < 4.65.117.031 (semver)
    Affected: N/A , < 4.62.102.024 (semver)
    Affected: N/A , < 4.65.108.018 (semver)
    Affected: N/A , < 4.69.120.013 (semver)
    Affected: N/A , < 4.46.106.031 (semver)
    Affected: N/A , < 7.2.2.0 (semver)
    Affected: N/A , < 74.64 (semver)
    Create a notification for this product.
    dell alienware_m15_r6_firmware Affected: 0 , < 1.27.0 (semver)
        cpe:2.3:o:dell:wyse_5070_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_3480_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_3580_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_3583_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3540_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3561_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3640_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_7550_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_7560_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_7750_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_7760_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_7780_all-in-one_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_7480_all-in-one_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_5480_all-in-one_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_9420_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5521_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5500_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5400_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3510_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3410_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3320_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_3580_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_3480_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:alienware_m15_r6_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell alienware_m15_r7_firmware Affected: 0 , < 1.22.0 (semver)
        cpe:2.3:o:dell:xps_17_9720_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:xps_13_9300_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:wyse_5470_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_14_3420_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_15_3520_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_5570_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_5080_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_7070_ultra_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3120_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3310_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5310_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5310_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_15_3520_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:g16_7620_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:g15_5510_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:g15_5520_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:alienware_m15_r7_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell alienware_m16_r1_firmware Affected: 0 , < 1.14.1 (semver)
        cpe:2.3:o:dell:alienware_m18_r1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:alienware_m16_r1_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell alienware_x14_r2_firmware Affected: 0 , < 1.11.0 (semver)
        cpe:2.3:o:dell:vostro_16_5630_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_3020_small_desktop_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_3020_tower_desktop_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3480_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_all-in-one_7410_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_micro_7010_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_micro_plus_7010_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_small_form_factor_7010_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_small_form_factor_plus_7010_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_tower_7010_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_tower_plus_7010_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5440_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7340_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7440_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7640_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_3020_desktop_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_3020_small_desktop_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_16_5630_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_16_7630_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_14_5430_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_14_7430_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:chengming_3911_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:chengming_3910_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:alienware_x16_r1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:alienware_x14_r2_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell chengming_3900_firmware Affected: 0 , < 1.19.0 (semver)
        cpe:2.3:o:dell:xps_13_9305_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_3710_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_3910_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_5620_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3470_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_5470_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_xe4_tower_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_7000_micro_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_7000_small_form_factor_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_7000_tower_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_7000_xe_micro_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_5000_micro_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_5000_small_form_factor_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_5000_tower_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_3000_micro_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_3000_small_form_factor_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_3000_tower_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3330_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5330_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5430_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5431_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_3910_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_16_5620_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_14_5420_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:chengming_3900_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell chengming_3988_firmware Affected: 0 , < 1.20.0 (semver)
        cpe:2.3:o:dell:xps_15_9520_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_15_7510_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_3471_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_3671_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_7620_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3571_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_5570_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5531_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7330_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7430_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7530_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_9430_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_3671_firmware:*:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_3471_firmware:*:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_16_plus_7620_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_16_7610_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_15_7510_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_14_plus_7420_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:chengming_3988_firmware:*:*:*:*:*:*:*:*
    Create a notification for this product.
    dell chengming_3991_firmware Affected: 0 , < 1.24.0 (semver)
        cpe:2.3:o:dell:xps_17_9710_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_5090_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3550_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_5760_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_3070_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_5070_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_7070_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_7071_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_9510_2in1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5510_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5410_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_7700_all-in-one_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_7490_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_5401_aio_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_5401_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_5400_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:chengming_3990_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:chengming_3991_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell g15_5511_firmware Affected: 0 , < 1.26.0 (semver)
        cpe:2.3:o:dell:xps_15_9500_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_7500_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_3590_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_15_3510_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_5550_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_3280_all-in-one_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_5270_all-in-one_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_7470_all-in-one_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_7770_all-in-one_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7410_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7310_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7210_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7200_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5421_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_7501_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_7500_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_15_3511_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:g15_5511_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell g15_5530_firmware Affected: 0 , < 1.12.0 (semver)
        cpe:2.3:o:dell:latitude_7230_rugged_extreme_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3140_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_16_plus_7630_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_14_plus_7430_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:g16_7630_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:g15_5530_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell g3_3500_firmware Affected: 0 , < 1.28.0 (semver)
        cpe:2.3:o:dell:xps_17_9700_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_3400_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_3401_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_3500_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_3501_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_5402_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_5502_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3541_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_5750_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_xe3_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_7060_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_5060_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_3060_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5401_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5501_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7300_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7320_detachable_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7400_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_3501_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_5402_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_5406_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_5409_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_5502_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_5509_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_7306_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_7506_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_7706_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3430_tower_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:g5_5500_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:g3_3500_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell g5_5000_firmware Affected: 0 , < 1.17.0 (semver)
        cpe:2.3:o:dell:latitude_9330_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_16_7620_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_14_7420_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:g5_5000_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell g5_5090_firmware Affected: 0 , < 1.23.0 (semver)
        cpe:2.3:o:dell:xps_13_7390_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:wyse_5470_all-in-one_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_5880_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3240_compact_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3440_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_7080_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7330_rugged_laptop_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5430_rugged_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3310_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3431_tower_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:g5_5090_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell dell_g7_7700_firmware Affected: 0 , < 1.30.0 (semver)
        cpe:2.3:o:dell:precision_3530_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_7760_all-in-one_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_7460_all_in_one_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_5260_all-in-one_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5491_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5591_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:dell_g7_7500_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:dell_g7_7700_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell precision_3630_tower_firmware Affected: 0 , < 2.25.0 (semver)
        cpe:2.3:o:dell:vostro_13_5310_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_13_5310_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3630_tower_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_13_5320_firmware Affected: 0 , < 1.16.0 (semver)
        cpe:2.3:o:dell:vostro_5320_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3530_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3430_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_13_5320_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_13_5330_firmware Affected: 0 , < 1.12.1 (semver)
        cpe:2.3:o:dell:inspiron_13_5330_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_14_5410_firmware Affected: 0 , < 2.24.0 (semver)
        cpe:2.3:o:dell:vostro_15_5510_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_14_5410_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_5410_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_15_5510_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_15_5518_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_14_5418_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_14_5410_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_15_3530_firmware Affected: 0 , < 1.8.0 (semver)
        cpe:2.3:o:dell:vostro_14_3430_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_15_3530_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_5480_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_9440_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_27_7720_all-in-one_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_24_5420_all-in-one_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_15_3530_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_24_5411_all-in-one_firmware Affected: 0 , < 1.18.0 (semver)
        cpe:2.3:o:dell:inspiron_27_7710_all-in-one_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_24_5410_all-in-one_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_24_5411_all-in-one_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_3593_firmware Affected: 0 , < 1.29.0 (semver)
        cpe:2.3:o:dell:xps_13_7390_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_7740_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_7540_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7424_rugged_extreme_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5420_rugged_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5424_rugged_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5300_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5300_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3301_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_5593_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_3793_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_3593_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_3880_firmware Affected: 0 , < 1.24.1 (semver)
        cpe:2.3:o:dell:inspiron_3881_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_3880_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_3891_firmware Affected: 0 , < 1.22.1 (semver)
        cpe:2.3:o:dell:vostro_5890_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_3890_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_3690_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3450_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_3891_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_5301_firmware Affected: 0 , < 1.31.0 (semver)
        cpe:2.3:o:dell:vostro_5301_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_7730_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_7530_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5290_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3500_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3400_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3190_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3190_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_7400_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_7300_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_5301_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_3300_firmware Affected: 0 , < 1.25.0 (semver)
        cpe:2.3:o:dell:xps_15_7590_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:xps_15_9510_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_5560_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_5540_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3551_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_7090_ultra_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_3090_ultra_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_9410_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7400_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5511_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5411_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3300_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_3340_firmware Affected: 0 , < 1.10.0 (semver)
        cpe:2.3:o:dell:xps_15_9530_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_5680_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3540_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3440_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3340_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_3420_firmware Affected: 0 , < 1.34.0 (semver)
        cpe:2.3:o:dell:precision_5530_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3520_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3420_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_5290_firmware Affected: 0 , < 1.32.0 (semver)
        cpe:2.3:o:dell:latitude_5590_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5490_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5290_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_5320_firmware Affected: 0 , < 1.36.0 (semver)
        cpe:2.3:o:dell:precision_3560_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5520_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5320_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_5340_firmware Affected: 0 , < 1.10.1 (semver)
        cpe:2.3:o:dell:precision_3580_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3581_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5540_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5340_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_5420_firmware Affected: 0 , < 1.36.2 (semver)
        cpe:2.3:o:dell:latitude_5420_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_5530_firmware Affected: 0 , < 1.21.1 (semver)
        cpe:2.3:o:dell:precision_3570_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5530_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_7220_rugged_extreme_firmware Affected: 0 , < 1.33.0 (semver)
        cpe:2.3:o:dell:latitude_rugged_7220_extreme_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7220_rugged_extreme_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_7290_firmware Affected: 0 , < 1.35.0 (semver)
        cpe:2.3:o:dell:latitude_7490_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7390_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7290_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_7320_firmware Affected: 0 , < 1.34.2 (semver)
        cpe:2.3:o:dell:latitude_7520_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7420_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7320_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_9520_firmware Affected: 0 , < 1.30.1 (semver)
        cpe:2.3:o:dell:latitude_9520_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell optiplex_3000_thin_client_firmware Affected: 0 , < 1.15.0 (semver)
        cpe:2.3:o:dell:optiplex_3000_thin_client_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell optiplex_3080_firmware Affected: 0 , < 2.22.0 (semver)
        cpe:2.3:o:dell:xps_13_9310_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_3080_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell optiplex_3090_firmware Affected: 0 , < 2.16.0 (semver)
        cpe:2.3:o:dell:xps_8940_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_3090_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell optiplex_5090_tower_firmware Affected: 0 , < 1.22.2 (semver)
        cpe:2.3:o:dell:optiplex_7090_tower_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_5090_micro_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_5090_small_form_factor_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_5090_tower_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell optiplex_5400_all-in-one_firmware Affected: 0 , < 1.1.37 (semver)
        cpe:2.3:o:dell:optiplex_7400_all-in-one_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_5400_all-in-one_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell optiplex_5490_all-in-one_firmware Affected: 0 , < 1.27.1 (semver)
        cpe:2.3:o:dell:optiplex_7490_all-in-one_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_5490_all-in-one_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell precision_3260_xe_compact_firmware Affected: 0 , < 3.3.2 (semver)
        cpe:2.3:o:dell:precision_3460_small_form_factor_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3460_xe_small_form_factor_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3260_compact_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3260_xe_compact_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell precision_3650_tower_firmware Affected: 0 , < 1.28.1 (semver)
        cpe:2.3:o:dell:precision_3650_tower_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell precision_3660_firmware Affected: 0 , < 2.11.1 (semver)
        cpe:2.3:o:dell:precision_3660_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    Date Public
    2024-02-22 06:30
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "affected": [
              {
                "cpes": [
                  "cpe:2.3:o:dell:wyse_5070_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_3480_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_3580_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_3583_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3540_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3561_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3640_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_7550_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_7560_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_7750_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_7760_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_7780_all-in-one_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_7480_all-in-one_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_5480_all-in-one_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_9420_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5521_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5500_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5400_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3510_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3410_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3320_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_3580_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_3480_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:alienware_m15_r6_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "alienware_m15_r6_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.27.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:xps_17_9720_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:xps_13_9300_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:wyse_5470_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_14_3420_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_15_3520_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_5570_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_5080_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_7070_ultra_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3120_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3310_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5310_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5310_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_15_3520_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:g16_7620_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:g15_5510_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:g15_5520_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:alienware_m15_r7_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "alienware_m15_r7_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.22.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:alienware_m18_r1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:alienware_m16_r1_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "alienware_m16_r1_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.14.1",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:vostro_16_5630_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_3020_small_desktop_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_3020_tower_desktop_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3480_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_all-in-one_7410_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_micro_7010_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_micro_plus_7010_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_small_form_factor_7010_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_small_form_factor_plus_7010_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_tower_7010_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_tower_plus_7010_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5440_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7340_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7440_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7640_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_3020_desktop_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_3020_small_desktop_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_16_5630_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_16_7630_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_14_5430_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_14_7430_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:chengming_3911_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:chengming_3910_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:alienware_x16_r1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:alienware_x14_r2_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "alienware_x14_r2_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.11.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:xps_13_9305_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_3710_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_3910_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_5620_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3470_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_5470_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_xe4_tower_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_7000_micro_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_7000_small_form_factor_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_7000_tower_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_7000_xe_micro_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_5000_micro_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_5000_small_form_factor_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_5000_tower_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_3000_micro_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_3000_small_form_factor_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_3000_tower_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3330_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5330_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5430_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5431_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_3910_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_16_5620_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_14_5420_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:chengming_3900_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "chengming_3900_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.19.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:xps_15_9520_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_15_7510_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_3471_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_3671_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_7620_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3571_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_5570_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5531_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7330_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7430_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7530_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_9430_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_3671_firmware:*:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_3471_firmware:*:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_16_plus_7620_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_16_7610_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_15_7510_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_14_plus_7420_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:chengming_3988_firmware:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "chengming_3988_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.20.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:xps_17_9710_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_5090_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3550_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_5760_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_3070_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_5070_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_7070_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_7071_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_9510_2in1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5510_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5410_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_7700_all-in-one_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_7490_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_5401_aio_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_5401_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_5400_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:chengming_3990_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:chengming_3991_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "chengming_3991_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.24.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:xps_15_9500_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_7500_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_3590_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_15_3510_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_5550_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_3280_all-in-one_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_5270_all-in-one_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_7470_all-in-one_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_7770_all-in-one_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7410_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7310_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7210_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7200_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5421_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_7501_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_7500_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_15_3511_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:g15_5511_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "g15_5511_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.26.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:latitude_7230_rugged_extreme_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3140_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_16_plus_7630_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_14_plus_7430_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:g16_7630_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:g15_5530_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "g15_5530_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.12.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:xps_17_9700_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_3400_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_3401_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_3500_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_3501_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_5402_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_5502_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3541_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_5750_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_xe3_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_7060_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_5060_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_3060_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5401_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5501_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7300_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7320_detachable_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7400_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_3501_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_5402_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_5406_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_5409_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_5502_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_5509_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_7306_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_7506_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_7706_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3430_tower_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:g5_5500_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:g3_3500_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "g3_3500_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.28.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:latitude_9330_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_16_7620_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_14_7420_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:g5_5000_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "g5_5000_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.17.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:xps_13_7390_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:wyse_5470_all-in-one_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_5880_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3240_compact_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3440_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_7080_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7330_rugged_laptop_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5430_rugged_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3310_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3431_tower_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:g5_5090_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "g5_5090_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.23.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:precision_3530_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_7760_all-in-one_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_7460_all_in_one_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_5260_all-in-one_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5491_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5591_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:dell_g7_7500_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:dell_g7_7700_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "dell_g7_7700_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.30.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:vostro_13_5310_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_13_5310_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3630_tower_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "precision_3630_tower_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "2.25.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:vostro_5320_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3530_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3430_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_13_5320_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "inspiron_13_5320_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.16.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:inspiron_13_5330_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "inspiron_13_5330_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.12.1",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:vostro_15_5510_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_14_5410_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_5410_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_15_5510_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_15_5518_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_14_5418_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_14_5410_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "inspiron_14_5410_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "2.24.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:vostro_14_3430_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_15_3530_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_5480_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_9440_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_27_7720_all-in-one_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_24_5420_all-in-one_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_15_3530_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "inspiron_15_3530_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.8.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:inspiron_27_7710_all-in-one_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_24_5410_all-in-one_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_24_5411_all-in-one_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "inspiron_24_5411_all-in-one_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.18.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:xps_13_7390_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_7740_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_7540_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7424_rugged_extreme_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5420_rugged_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5424_rugged_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5300_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5300_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3301_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_5593_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_3793_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_3593_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "inspiron_3593_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.29.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:inspiron_3881_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_3880_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "inspiron_3880_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.24.1",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:vostro_5890_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_3890_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_3690_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3450_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_3891_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "inspiron_3891_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.22.1",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:vostro_5301_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_7730_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_7530_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5290_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3500_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3400_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3190_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3190_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_7400_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_7300_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_5301_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "inspiron_5301_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.31.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:xps_15_7590_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:xps_15_9510_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_5560_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_5540_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3551_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_7090_ultra_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_3090_ultra_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_9410_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7400_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5511_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5411_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3300_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "latitude_3300_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.25.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:xps_15_9530_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_5680_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3540_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3440_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3340_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "latitude_3340_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.10.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:precision_5530_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3520_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3420_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "latitude_3420_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.34.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:latitude_5590_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5490_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5290_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "latitude_5290_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.32.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:precision_3560_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5520_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5320_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "latitude_5320_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.36.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:precision_3580_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3581_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5540_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5340_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "latitude_5340_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.10.1",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:latitude_5420_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "latitude_5420_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.36.2",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:precision_3570_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5530_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "latitude_5530_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.21.1",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:latitude_rugged_7220_extreme_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7220_rugged_extreme_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "latitude_7220_rugged_extreme_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.33.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:latitude_7490_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7390_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7290_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "latitude_7290_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.35.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:latitude_7520_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7420_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7320_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "latitude_7320_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.34.2",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:latitude_9520_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "latitude_9520_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.30.1",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:optiplex_3000_thin_client_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "optiplex_3000_thin_client_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.15.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:xps_13_9310_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_3080_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "optiplex_3080_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "2.22.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:xps_8940_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_3090_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "optiplex_3090_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "2.16.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:optiplex_7090_tower_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_5090_micro_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_5090_small_form_factor_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_5090_tower_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "optiplex_5090_tower_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.22.2",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:optiplex_7400_all-in-one_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_5400_all-in-one_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "optiplex_5400_all-in-one_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.1.37",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:optiplex_7490_all-in-one_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_5490_all-in-one_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "optiplex_5490_all-in-one_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.27.1",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:precision_3460_small_form_factor_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3460_xe_small_form_factor_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3260_compact_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3260_xe_compact_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "precision_3260_xe_compact_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "3.3.2",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:precision_3650_tower_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "precision_3650_tower_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.28.1",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:precision_3660_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "precision_3660_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "2.11.1",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2023-43078",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-08-28T14:17:19.963412Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-08-28T22:31:00.645Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Dell Client Platform, Dell Dock Firmware",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "1.27.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.22.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.14.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.11.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.19.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.20.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.24.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.26.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.12.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.28.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.17.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.23.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.30.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.25.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.16.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.12.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.24.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.8.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.18.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.29.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.24.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.22.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.25.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.10.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.34.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.32.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.36.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.10.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.36.2",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.21.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.33.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.35.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.34.2",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.30.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.15.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.22.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.16.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.22.2",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.1.37",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.27.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "3.3.2",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.28.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.11.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.28.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.28.8",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.1.16",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.20.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.9.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.6.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.1.15",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.23.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "3.20.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.19.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.9.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.13.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.0.14.20",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "01.00.15",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "01.00.36",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.62.156.006",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.66.128.015",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.65.111.022",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.61.124.014",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.46.147.004",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.46.134.013",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.66.131.016",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.46.135.009",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.65.162.003",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.65.119.017",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.62.140.014",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.46.166.001",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.65.163.002",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.62.139.013",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.46.112.015",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.65.116.019",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.46.143.009",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.46.145.004",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.65.117.031",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.62.102.024",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.65.108.018",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.69.120.013",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.46.106.031",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "7.2.2.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "74.64",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "datePublic": "2024-02-22T06:30:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installation resulting in arbitrary folder deletion, which could lead to Privilege Escalation or Denial of Service."
                }
              ],
              "value": "Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installation resulting in arbitrary folder deletion, which could lead to Privilege Escalation or Denial of Service."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 6.7,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-59",
                  "description": "CWE-59: Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2024-08-28T05:33:16.899Z",
            "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
            "shortName": "dell"
          },
          "references": [
            {
              "tags": [
                "vendor-advisory"
              ],
              "url": "https://www.dell.com/support/kbdoc/en-us/000217981/dsa-2023-362-security-update-for-dell-dock-firmware-and-dell-client-platform-for-an-improper-link-resolution-vulnerability"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "assignerShortName": "dell",
        "cveId": "CVE-2023-43078",
        "datePublished": "2024-08-28T05:33:16.899Z",
        "dateReserved": "2023-09-15T07:02:11.648Z",
        "dateUpdated": "2024-08-28T22:31:00.645Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2024-0158 (GCVE-0-2024-0158)

    Vulnerability from nvd – Published: 2024-07-02 06:20 – Updated: 2024-08-01 17:41
    VLAI
    Summary
    Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2024-07-02 14:21 UTC
    CWE
    • CWE-20 - Improper Input Validation
    Assigner
    dell CNA under the mitre root
    CNA scorecard C 70/100 over 459 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Dell CPG BIOS Affected: N/A , < 1.28.0 (semver)
    Affected: N/A , < 1.23.0 (semver)
    Affected: N/A , < 1.15.0 (semver)
    Affected: N/A , < 1.2.1 (semver)
    Affected: N/A , < 1.12.1 (semver)
    Affected: N/A , < 1.2.0 (semver)
    Affected: N/A , < 1.20.0 (semver)
    Affected: N/A , < 1.12.0 (semver)
    Affected: N/A , < 1.26.0 (semver)
    Affected: N/A , < 1.27.0 (semver)
    Affected: N/A , < 1.13.0 (semver)
    Affected: N/A , < 1.29.0 (semver)
    Affected: N/A , < 1.19.0 (semver)
    Affected: N/A , < 1.25.0 (semver)
    Affected: N/A , < 1.31.0 (semver)
    Affected: N/A , < 2.27.0 (semver)
    Affected: N/A , < 2.35.0 (semver)
    Affected: N/A , < 2.39.0 (semver)
    Affected: N/A , < 1.17.0 (semver)
    Affected: N/A , < 1.24.0 (semver)
    Affected: N/A , < 2.26.0 (semver)
    Affected: N/A , < 1.13.1 (semver)
    Affected: N/A , < 2.25.0 (semver)
    Affected: N/A , < 1.3.1 (semver)
    Affected: N/A , < 1.18.0 (semver)
    Affected: N/A , < 1.21.0 (semver)
    Affected: N/A , < 1.22.0 (semver)
    Affected: N/A , < 1.9.0 (semver)
    Affected: N/A , < 1.3.0 (semver)
    Affected: N/A , < 1.30.0 (semver)
    Affected: N/A , < 1.32.0 (semver)
    Affected: N/A , < 1.29..0 (semver)
    Affected: N/A , < 1.45.0 (semver)
    Affected: N/A , < 1.33.0 (semver)
    Affected: N/A , < 1.11.0 (semver)
    Affected: N/A , < 1.35.0 (semver)
    Affected: N/A , < 1.34.0 (semver)
    Affected: N/A , < 1.36.0 (semver)
    Affected: N/A , < 1.36.2 (semver)
    Affected: N/A , < 1.25.1 (semver)
    Affected: N/A , < 1.21.1 (semver)
    Affected: N/A , < 1.4.1 (semver)
    Affected: N/A , < 1.49.0 (semver)
    Affected: N/A , < 1.37.0 (semver)
    Affected: N/A , < 1.34.2 (semver)
    Affected: N/A , < 1.30.1 (semver)
    Affected: N/A , < 1.16.1 (semver)
    Affected: N/A , < 2.24.0 (semver)
    Affected: N/A , < 2.18.0 (semver)
    Affected: N/A , < 1.1.38 (semver)
    Affected: N/A , < 3.3.2 (semver)
    Affected: N/A , < 2.29.0 (semver)
    Affected: N/A , < 2.12.0 (semver)
    Affected: N/A , < 2.30.0 (semver)
    Affected: N/A , < 1.30.8 (semver)
    Affected: N/A , < 1.10.0 (semver)
    Affected: N/A , < 1.26.1 (semver)
    Affected: N/A , < 1.1.17 (semver)
    Affected: N/A , < 1.20.1 (semver)
    Affected: N/A , < 1.7.0 (semver)
    Affected: N/A , < 01.03.00 (semver)
    Affected: N/A , < 1.1.16 (semver)
    Affected: N/A , < 3.21.0 (semver)
    Affected: N/A , < 2.23.0 (semver)
    Affected: N/A , < 1.19.1 (semver)
    Affected: N/A , < 2.10.0 (semver)
    Affected: N/A , < 2.18.1 (semver)
    Affected: N/A , < 1.14.0 (semver)
    Create a notification for this product.
    Date Public
    2024-03-12 06:30
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2024-0158",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-07-02T14:21:02.955425Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-07-02T14:21:13.009Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          },
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-01T17:41:16.039Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "vendor-advisory",
                  "x_transferred"
                ],
                "url": "https://www.dell.com/support/kbdoc/en-in/000220141/dsa-2024-030-security-update-for-dell-client-bios-for-an-improper-input-validation-vulnerability"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "CPG BIOS",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "1.28.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.23.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.15.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.2.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.12.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.2.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.20.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.12.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.26.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.27.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.13.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.29.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.19.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.25.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.27.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.35.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.39.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.17.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.24.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.26.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.13.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.25.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.3.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.18.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.21.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.22.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.9.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.3.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.30.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.32.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.29..0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.45.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.33.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.11.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.35.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.34.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.36.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.36.2",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.25.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.21.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.4.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.49.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.37.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.34.2",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.30.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.16.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.24.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.18.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.1.38",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "3.3.2",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.29.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.12.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.30.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.30.8",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.10.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.26.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.1.17",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.20.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.7.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "01.03.00",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.1.16",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "3.21.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.23.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.19.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.10.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.18.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.14.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "datePublic": "2024-03-12T06:30:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges"
                }
              ],
              "value": "Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges"
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "LOW",
                "baseScore": 5.1,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-20",
                  "description": "CWE-20: Improper Input Validation",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2024-07-02T06:20:44.735Z",
            "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
            "shortName": "dell"
          },
          "references": [
            {
              "tags": [
                "vendor-advisory"
              ],
              "url": "https://www.dell.com/support/kbdoc/en-in/000220141/dsa-2024-030-security-update-for-dell-client-bios-for-an-improper-input-validation-vulnerability"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "assignerShortName": "dell",
        "cveId": "CVE-2024-0158",
        "datePublished": "2024-07-02T06:20:44.735Z",
        "dateReserved": "2023-12-14T05:30:35.591Z",
        "dateUpdated": "2024-08-01T17:41:16.039Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2024-0160 (GCVE-0-2024-0160)

    Vulnerability from nvd – Published: 2024-06-12 06:41 – Updated: 2024-08-01 17:41
    VLAI
    Summary
    Dell Client Platform contains an incorrect authorization vulnerability. An attacker with physical access to the system could potentially exploit this vulnerability by bypassing BIOS authorization to modify settings in the BIOS.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2024-06-12 13:17 UTC
    CWE
    • CWE-863 - Incorrect Authorization
    Assigner
    dell CNA under the mitre root
    CNA scorecard C 70/100 over 459 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Dell CPG BIOS Affected: N/A , < 1.32.0 (semver)
    Create a notification for this product.
    dell cpg_bios Affected: 0 , < 1.32.0 (custom)
        cpe:2.3:o:dell:cpg_bios:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Date Public
    2024-06-11 06:30
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "affected": [
              {
                "cpes": [
                  "cpe:2.3:o:dell:cpg_bios:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "cpg_bios",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.32.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2024-0160",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-06-12T13:17:14.905056Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-06-12T13:19:06.076Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          },
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-01T17:41:16.055Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "vendor-advisory",
                  "x_transferred"
                ],
                "url": "https://www.dell.com/support/kbdoc/en-us/000224763/dsa-2024-122"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "CPG BIOS",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "1.32.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "value": "Dell would like to thank Ben McEwan, Penetration Tester at Bridewell (www.bridewell.com) for reporting this issue."
            }
          ],
          "datePublic": "2024-06-11T06:30:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "Dell Client Platform contains an incorrect authorization vulnerability. An attacker with physical access to the system could potentially exploit this vulnerability by bypassing BIOS authorization to modify settings in the BIOS."
                }
              ],
              "value": "Dell Client Platform contains an incorrect authorization vulnerability. An attacker with physical access to the system could potentially exploit this vulnerability by bypassing BIOS authorization to modify settings in the BIOS."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "PHYSICAL",
                "availabilityImpact": "HIGH",
                "baseScore": 6.8,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-863",
                  "description": "CWE-863: Incorrect Authorization",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2024-06-12T06:41:33.041Z",
            "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
            "shortName": "dell"
          },
          "references": [
            {
              "tags": [
                "vendor-advisory"
              ],
              "url": "https://www.dell.com/support/kbdoc/en-us/000224763/dsa-2024-122"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "assignerShortName": "dell",
        "cveId": "CVE-2024-0160",
        "datePublished": "2024-06-12T06:41:33.041Z",
        "dateReserved": "2023-12-14T05:30:38.641Z",
        "dateUpdated": "2024-08-01T17:41:16.055Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2024-22448 (GCVE-0-2024-22448)

    Vulnerability from nvd – Published: 2024-04-10 07:30 – Updated: 2024-08-01 22:43
    VLAI
    Summary
    Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2024-04-22 16:57 UTC
    CWE
    Assigner
    dell CNA under the mitre root
    CNA scorecard C 70/100 over 459 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Dell CPG BIOS Affected: N/A , < 1.29.0 (semver)
    Affected: N/A , < 1.16.0 (semver)
    Affected: N/A , < 1.13.0 (semver)
    Affected: N/A , < 1.28.0 (semver)
    Affected: N/A , < 1.14.0 (semver)
    Affected: N/A , < 1.31.0 (semver)
    Affected: N/A , < 1.31.1 (semver)
    Affected: N/A , < 1.31.2 (semver)
    Affected: N/A , < 1.31.3 (semver)
    Affected: N/A , < 1.31.4 (semver)
    Affected: N/A , < 1.31.5 (semver)
    Affected: N/A , < 1.31.6 (semver)
    Affected: N/A , < 1.31.7 (semver)
    Affected: N/A , < 1.31.8 (semver)
    Affected: N/A , < 1.31.9 (semver)
    Affected: N/A , < 1.31.10 (semver)
    Affected: N/A , < 1.31.11 (semver)
    Affected: N/A , < 1.31.12 (semver)
    Affected: N/A , < 1.31.13 (semver)
    Affected: N/A , < 1.31.14 (semver)
    Affected: N/A , < 1.31.15 (semver)
    Affected: N/A , < 1.31.16 (semver)
    Create a notification for this product.
    dell alienware_16_r1 Affected: 0 , < 1.13.0 (semver)
        cpe:2.3:a:dell:alienware_16_r1:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell alienware_15_r6 Affected: 0 , < 1.29.0 (semver)
        cpe:2.3:a:dell:alienware_15_r6:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell alienware_18_r1 Affected: 0 , < 1.16.0 (semver)
        cpe:2.3:a:dell:alienware_18_r1:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell alienware_14_r2 Affected: 0 , < 1.13.0 (semver)
        cpe:2.3:a:dell:alienware_14_r2:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell g15_5511 Affected: 0 , < 1.28.0 (semver)
        cpe:2.3:h:dell:g15_5511:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell g15_5530 Affected: 0 , < 1.14.0 (semver)
        cpe:2.3:h:dell:g15_5530:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell g16_7620 Affected: 0 , < 1.14.0 (semver)
        cpe:2.3:h:dell:g16_7620:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell g3_3500 Affected: 0 , < 1.29.0 (semver)
        cpe:2.3:h:dell:g3_3500:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell g5_5500 Affected: 0 , < 1.29.0 (semver)
        cpe:2.3:h:dell:g5_5500:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell g7_7500 Affected: 0 , < 1.31.0 (semver)
        cpe:2.3:h:dell:g7_7500:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell g7_7700 Affected: 0 , < 1.31.0 (semver)
        cpe:2.3:h:dell:g7_7700:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_13_5330 Affected: 0 , < 1.14.0 (semver)
        cpe:2.3:h:dell:inspiron_13_5330:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_15_3530 Affected: 0 , < 1.10.0 (semver)
        cpe:2.3:a:dell:inspiron_15_3530:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_3030s Affected: 0 , < 1.3.0 (semver)
        cpe:2.3:a:dell:inspiron_3030s:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_5301 Affected: 0 , < 1.32.0 (semver)
        cpe:2.3:h:dell:inspiron_5301:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_5400 Affected: 0 , < 1.27.0 (semver)
        cpe:2.3:h:dell:inspiron_5400:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_5401 Affected: 0 , < 1.27.0 (semver)
        cpe:2.3:h:dell:inspiron_5401:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_5402 Affected: 0 , < 1.29.0 (semver)
        cpe:2.3:h:dell:inspiron_5402:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_5409 Affected: 0 , < 1.29.0 (semver)
        cpe:2.3:h:dell:inspiron_5409:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_5502 Affected: 0 , < 1.29.0 (semver)
        cpe:2.3:h:dell:inspiron_5502:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_5509 Affected: 0 , < 1.29.0 (semver)
        cpe:2.3:h:dell:inspiron_5509:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_7300 Affected: - , < 1.32.0 (semver)
        cpe:2.3:h:dell:inspiron_7300:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_7400 Affected: 0 , < 1.32.0 (semver)
        cpe:2.3:h:dell:inspiron_7400:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_7700_aio Affected: 0 , < 1.27.0 (semver)
        cpe:2.3:h:dell:inspiron_7700_aio:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_5310 Affected: 0 , < 1.23.0 (semver)
        cpe:2.3:h:dell:latitude_5310:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_5310_2_in_1 Affected: 0 , < 1.23.0 (semver)
        cpe:2.3:h:dell:latitude_5310_2_in_1:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_5330 Affected: 0 , < 1.321.0 (semver)
        cpe:2.3:h:dell:latitude_5330:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_5340 Affected: 0 , < 1.12.0 (semver)
        cpe:2.3:a:dell:latitude_5340:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_5531 Affected: - , < 1.22.0 (semver)
        cpe:2.3:h:dell:latitude_5531:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_5540 Affected: 0 , < 1.12.0 (semver)
        cpe:2.3:a:dell:latitude_5540:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_7320 Affected: - , < 1.34.0 (semver)
        cpe:2.3:h:dell:latitude_7320:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_7340 Affected: 0 , < 1.13.0 (semver)
        cpe:2.3:a:dell:latitude_7340:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_7420 Affected: - , < 1.34.0 (semver)
        cpe:2.3:h:dell:latitude_7420:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_7520 Affected: 0 , < 1.34.0 (semver)
        cpe:2.3:h:dell:latitude_7520:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_9330 Affected: 0 , < 1.19.0 (semver)
        cpe:2.3:h:dell:latitude_9330:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_9420 Affected: 0 , < 1.29.0 (semver)
        cpe:2.3:h:dell:latitude_9420:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_9430 Affected: - , < 1.22.0 (semver)
        cpe:2.3:h:dell:latitude_9430:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_9440_2in1 Affected: 0 , < 1.10.0 (semver)
        cpe:2.3:a:dell:latitude_9440_2in1:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell optiplex_micro_7010 Affected: 0 , < 1.13.1 (semver)
        cpe:2.3:h:dell:optiplex_micro_7010:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell optiplex_small_form_factor_7010 Affected: 0 , < 1.13.1 (semver)
        cpe:2.3:h:dell:optiplex_small_form_factor_7010:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell optiplex_tower_7010 Affected: 0 , < 1.13.1 (semver)
        cpe:2.3:h:dell:optiplex_tower_7010:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell precision_3440 Affected: 0 , < 1.25.0 (semver)
        cpe:2.3:h:dell:precision_3440:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell precision_3571 Affected: 0 , < 1.22.0 (semver)
        cpe:2.3:h:dell:precision_3571:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell precision_3580 Affected: 0 , < 1.12.0 (semver)
        cpe:2.3:a:dell:precision_3580:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell precision_3581 Affected: 0 , < 1.12.0 (semver)
        cpe:2.3:h:dell:precision_3581:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell precision_3660 Affected: - , < 2.13.0 (semver)
        cpe:2.3:h:dell:precision_3660:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell precision_5570 Affected: 0 , < 1.22.0 (semver)
        cpe:2.3:h:dell:precision_5570:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell precision_5750 Affected: 0 , < 1.29.0 (semver)
        cpe:2.3:h:dell:precision_5750:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell precision_5770 Affected: 0 , < 1.24.0 (semver)
        cpe:2.3:h:dell:precision_5770:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell vostro_14_3430 Affected: 0 , < 1.10.0 (semver)
        cpe:2.3:h:dell:vostro_14_3430:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell vostro_15_3530 Affected: 0 , < 1.10.0 (semver)
        cpe:2.3:h:dell:vostro_15_3530:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell vostro_3030s Affected: 0 , < 1.3.0 (semver)
        cpe:2.3:h:dell:vostro_3030s:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell vostro_5301 Affected: 0 , < 1.32.0 (semver)
        cpe:2.3:h:dell:vostro_5301:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell vostro_5402 Affected: 0 , < 1.29.0 (semver)
        cpe:2.3:h:dell:vostro_5402:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell vostro_5502 Affected: - , < 1.29.0 (semver)
        cpe:2.3:h:dell:vostro_5502:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell vostro_5880 Affected: 0 , < 1.25.0 (semver)
        cpe:2.3:h:dell:vostro_5880:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell xps_17_9700 Affected: 0 , < 1.24.0 (semver)
        cpe:2.3:h:dell:xps_17_9700:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell xps_17_9730 Affected: 0 , < 1.11.0 (semver)
        cpe:2.3:h:dell:xps_17_9730:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell xps_9315_2in1 Affected: 0 , < 1.15.0 (semver)
        cpe:2.3:h:dell:xps_9315_2in1:-:*:*:*:*:*:*:*
    Create a notification for this product.
    Date Public
    2024-04-09 06:30
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "affected": [
              {
                "cpes": [
                  "cpe:2.3:a:dell:alienware_16_r1:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "alienware_16_r1",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.13.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:dell:alienware_15_r6:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "alienware_15_r6",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.29.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:dell:alienware_18_r1:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "alienware_18_r1",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.16.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:dell:alienware_14_r2:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "alienware_14_r2",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.13.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:g15_5511:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "g15_5511",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.28.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:g15_5530:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "g15_5530",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.14.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:g16_7620:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "g16_7620",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.14.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:g3_3500:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "g3_3500",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.29.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:g5_5500:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "g5_5500",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.29.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:g7_7500:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "g7_7500",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.31.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:g7_7700:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "g7_7700",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.31.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:inspiron_13_5330:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "inspiron_13_5330",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.14.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:dell:inspiron_15_3530:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "inspiron_15_3530",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.10.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:dell:inspiron_3030s:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "inspiron_3030s",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.3.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:inspiron_5301:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "inspiron_5301",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.32.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:inspiron_5400:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "inspiron_5400",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.27.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:inspiron_5401:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "inspiron_5401",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.27.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:inspiron_5402:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "inspiron_5402",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.29.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:inspiron_5409:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "inspiron_5409",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.29.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:inspiron_5502:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "inspiron_5502",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.29.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:inspiron_5509:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "inspiron_5509",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.29.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:inspiron_7300:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "inspiron_7300",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.32.0",
                    "status": "affected",
                    "version": "-",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:inspiron_7400:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "inspiron_7400",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.32.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:inspiron_7700_aio:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "inspiron_7700_aio",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.27.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:latitude_5310:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "latitude_5310",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.23.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:latitude_5310_2_in_1:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "latitude_5310_2_in_1",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.23.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:latitude_5330:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "latitude_5330",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.321.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:dell:latitude_5340:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "latitude_5340",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.12.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:latitude_5531:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "latitude_5531",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.22.0",
                    "status": "affected",
                    "version": "-",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:dell:latitude_5540:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "latitude_5540",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.12.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:latitude_7320:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "latitude_7320",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.34.0",
                    "status": "affected",
                    "version": "-",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:dell:latitude_7340:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "latitude_7340",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.13.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:latitude_7420:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "latitude_7420",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.34.0",
                    "status": "affected",
                    "version": "-",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:latitude_7520:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "latitude_7520",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.34.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:latitude_9330:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "latitude_9330",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.19.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:latitude_9420:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "latitude_9420",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.29.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:latitude_9430:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "latitude_9430",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.22.0",
                    "status": "affected",
                    "version": "-",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:dell:latitude_9440_2in1:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "latitude_9440_2in1",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.10.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:optiplex_micro_7010:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "optiplex_micro_7010",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.13.1",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:optiplex_small_form_factor_7010:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "optiplex_small_form_factor_7010",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.13.1",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:optiplex_tower_7010:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "optiplex_tower_7010",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.13.1",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:precision_3440:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "precision_3440",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.25.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:precision_3571:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "precision_3571",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.22.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:dell:precision_3580:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "precision_3580",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.12.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:precision_3581:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "precision_3581",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.12.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:precision_3660:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "precision_3660",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "2.13.0",
                    "status": "affected",
                    "version": "-",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:precision_5570:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "precision_5570",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.22.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:precision_5750:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "precision_5750",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.29.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:precision_5770:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "precision_5770",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.24.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:vostro_14_3430:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "vostro_14_3430",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.10.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:vostro_15_3530:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "vostro_15_3530",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.10.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:vostro_3030s:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "vostro_3030s",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.3.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:vostro_5301:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "vostro_5301",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.32.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:vostro_5402:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "vostro_5402",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.29.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:vostro_5502:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "vostro_5502",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.29.0",
                    "status": "affected",
                    "version": "-",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:vostro_5880:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "vostro_5880",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.25.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:xps_17_9700:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "xps_17_9700",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.24.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:xps_17_9730:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "xps_17_9730",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.11.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:xps_9315_2in1:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "xps_9315_2in1",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.15.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2024-22448",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-04-22T16:57:10.462584Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-06-04T17:52:58.050Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          },
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-01T22:43:34.907Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "vendor-advisory",
                  "x_transferred"
                ],
                "url": "https://www.dell.com/support/kbdoc/en-us/000221744/dsa-2024-066"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "CPG BIOS",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "1.29.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.16.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.13.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.28.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.14.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.2",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.3",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.4",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.5",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.6",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.7",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.8",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.9",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.10",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.11",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.12",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.13",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.14",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.15",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.16",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "value": "Dell Technologies would like to thank Eason for reporting this issue."
            }
          ],
          "datePublic": "2024-04-09T06:30:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service."
                }
              ],
              "value": "Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 4.7,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "LOW",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-787",
                  "description": "CWE-787: Out-of-bounds Write",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2024-04-10T07:30:08.507Z",
            "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
            "shortName": "dell"
          },
          "references": [
            {
              "tags": [
                "vendor-advisory"
              ],
              "url": "https://www.dell.com/support/kbdoc/en-us/000221744/dsa-2024-066"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "assignerShortName": "dell",
        "cveId": "CVE-2024-22448",
        "datePublished": "2024-04-10T07:30:08.507Z",
        "dateReserved": "2024-01-10T15:26:10.250Z",
        "dateUpdated": "2024-08-01T22:43:34.907Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2022-26861 (GCVE-0-2022-26861)

    Vulnerability from nvd – Published: 2022-09-06 20:15 – Updated: 2026-05-27 13:03
    VLAI
    Summary
    Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could exploit this vulnerability by sending malicious input via SMI to obtain arbitrary code execution during SMM.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2025-06-11 17:56 UTC
    CWE
    • CWE-1038 - Insecure Automated Optimizations
    Assigner
    dell CNA under the mitre root
    CNA scorecard C 70/100 over 459 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Dell CPG BIOS Affected: unspecified , < Gen7, Gen8, Gen9, Gen10, Gen11, 21Q1-Q4 (custom)
    Create a notification for this product.
    Date Public
    2022-08-04 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-03T05:18:37.970Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://www.dell.com/support/kbdoc/000202194"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2022-26861",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2025-06-11T17:56:14.298041Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-27T13:03:13.475Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "CPG BIOS",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "Gen7, Gen8, Gen9, Gen10, Gen11, 21Q1-Q4",
                  "status": "affected",
                  "version": "unspecified",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "datePublic": "2022-08-04T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could exploit this vulnerability by sending malicious input via SMI to obtain arbitrary code execution during SMM."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 7.9,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-1038",
                  "description": "CWE-1038: Insecure Automated Optimizations",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2022-09-06T20:15:20.000Z",
            "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
            "shortName": "dell"
          },
          "references": [
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://www.dell.com/support/kbdoc/000202194"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "secure@dell.com",
              "DATE_PUBLIC": "2022-08-04",
              "ID": "CVE-2022-26861",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "CPG BIOS",
                          "version": {
                            "version_data": [
                              {
                                "version_affected": "\u003c",
                                "version_value": "Gen7, Gen8, Gen9, Gen10, Gen11, 21Q1-Q4"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "Dell"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could exploit this vulnerability by sending malicious input via SMI to obtain arbitrary code execution during SMM."
                }
              ]
            },
            "impact": {
              "cvss": {
                "baseScore": 7.9,
                "baseSeverity": "High",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
                "version": "3.1"
              }
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "CWE-1038: Insecure Automated Optimizations"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "https://www.dell.com/support/kbdoc/000202194",
                  "refsource": "MISC",
                  "url": "https://www.dell.com/support/kbdoc/000202194"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "assignerShortName": "dell",
        "cveId": "CVE-2022-26861",
        "datePublished": "2022-09-06T20:15:20.148Z",
        "dateReserved": "2022-03-10T00:00:00.000Z",
        "dateUpdated": "2026-05-27T13:03:13.475Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2022-26860 (GCVE-0-2022-26860)

    Vulnerability from nvd – Published: 2022-09-06 20:15 – Updated: 2026-05-27 13:02
    VLAI
    Summary
    Dell BIOS versions contain a stack-based buffer overflow vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI to bypass security checks resulting in arbitrary code execution in SMM.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2025-06-11 18:01 UTC
    CWE
    • CWE-121 - Stack-based Buffer Overflow
    Assigner
    dell CNA under the mitre root
    CNA scorecard C 70/100 over 459 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Dell CPG BIOS Affected: unspecified , < All (custom)
    Create a notification for this product.
    Date Public
    2022-08-04 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-03T05:18:38.162Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://www.dell.com/support/kbdoc/000202194"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2022-26860",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2025-06-11T18:01:11.510619Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-27T13:02:18.581Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "CPG BIOS",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "All",
                  "status": "affected",
                  "version": "unspecified",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "datePublic": "2022-08-04T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Dell BIOS versions contain a stack-based buffer overflow vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI to bypass security checks resulting in arbitrary code execution in SMM."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-121",
                  "description": "CWE-121: Stack-based Buffer Overflow",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2022-09-06T20:15:19.000Z",
            "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
            "shortName": "dell"
          },
          "references": [
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://www.dell.com/support/kbdoc/000202194"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "secure@dell.com",
              "DATE_PUBLIC": "2022-08-04",
              "ID": "CVE-2022-26860",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "CPG BIOS",
                          "version": {
                            "version_data": [
                              {
                                "version_affected": "\u003c",
                                "version_value": "All"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "Dell"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Dell BIOS versions contain a stack-based buffer overflow vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI to bypass security checks resulting in arbitrary code execution in SMM."
                }
              ]
            },
            "impact": {
              "cvss": {
                "baseScore": 7.5,
                "baseSeverity": "High",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.1"
              }
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "CWE-121: Stack-based Buffer Overflow"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "https://www.dell.com/support/kbdoc/000202194",
                  "refsource": "MISC",
                  "url": "https://www.dell.com/support/kbdoc/000202194"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "assignerShortName": "dell",
        "cveId": "CVE-2022-26860",
        "datePublished": "2022-09-06T20:15:19.312Z",
        "dateReserved": "2022-03-10T00:00:00.000Z",
        "dateUpdated": "2026-05-27T13:02:18.581Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2022-26859 (GCVE-0-2022-26859)

    Vulnerability from nvd – Published: 2022-09-06 20:15 – Updated: 2026-05-27 13:02
    VLAI
    Summary
    Dell BIOS contains a race condition vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI in order to bypass security checks during SMM.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2025-06-11 18:25 UTC
    CWE
    • CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition
    Assigner
    dell CNA under the mitre root
    CNA scorecard C 70/100 over 459 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Dell CPG BIOS Affected: unspecified , < All (custom)
    Create a notification for this product.
    Date Public
    2022-08-04 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-03T05:18:37.781Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://www.dell.com/support/kbdoc/000202194"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2022-26859",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2025-06-11T18:25:46.865745Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-27T13:02:46.738Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "CPG BIOS",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "All",
                  "status": "affected",
                  "version": "unspecified",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "datePublic": "2022-08-04T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Dell BIOS contains a race condition vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI in order to bypass security checks during SMM."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 6.1,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "LOW",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-367",
                  "description": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2022-09-06T20:15:18.000Z",
            "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
            "shortName": "dell"
          },
          "references": [
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://www.dell.com/support/kbdoc/000202194"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "secure@dell.com",
              "DATE_PUBLIC": "2022-08-04",
              "ID": "CVE-2022-26859",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "CPG BIOS",
                          "version": {
                            "version_data": [
                              {
                                "version_affected": "\u003c",
                                "version_value": "All"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "Dell"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Dell BIOS contains a race condition vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI in order to bypass security checks during SMM."
                }
              ]
            },
            "impact": {
              "cvss": {
                "baseScore": 6.1,
                "baseSeverity": "Medium",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N",
                "version": "3.1"
              }
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "https://www.dell.com/support/kbdoc/000202194",
                  "refsource": "MISC",
                  "url": "https://www.dell.com/support/kbdoc/000202194"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "assignerShortName": "dell",
        "cveId": "CVE-2022-26859",
        "datePublished": "2022-09-06T20:15:18.435Z",
        "dateReserved": "2022-03-10T00:00:00.000Z",
        "dateUpdated": "2026-05-27T13:02:46.738Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2022-26858 (GCVE-0-2022-26858)

    Vulnerability from nvd – Published: 2022-09-06 20:15 – Updated: 2026-05-27 12:57
    VLAI
    Summary
    Dell BIOS versions contain an Improper Authentication vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2025-06-11 16:10 UTC
    CWE
    • CWE-287 - Improper Authentication
    Assigner
    dell CNA under the mitre root
    CNA scorecard C 70/100 over 459 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Dell CPG BIOS Affected: unspecified , < All (custom)
    Create a notification for this product.
    Date Public
    2022-08-04 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-03T05:18:37.924Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://www.dell.com/support/kbdoc/000202194"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2022-26858",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2025-06-11T16:10:14.406568Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-27T12:57:23.397Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "CPG BIOS",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "All",
                  "status": "affected",
                  "version": "unspecified",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "datePublic": "2022-08-04T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Dell BIOS versions contain an Improper Authentication vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 6.1,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "LOW",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:N",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-287",
                  "description": "CWE-287: Improper Authentication",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2022-09-06T20:15:17.000Z",
            "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
            "shortName": "dell"
          },
          "references": [
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://www.dell.com/support/kbdoc/000202194"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "secure@dell.com",
              "DATE_PUBLIC": "2022-08-04",
              "ID": "CVE-2022-26858",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "CPG BIOS",
                          "version": {
                            "version_data": [
                              {
                                "version_affected": "\u003c",
                                "version_value": "All"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "Dell"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Dell BIOS versions contain an Improper Authentication vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls."
                }
              ]
            },
            "impact": {
              "cvss": {
                "baseScore": 6.1,
                "baseSeverity": "Medium",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:N",
                "version": "3.1"
              }
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "CWE-287: Improper Authentication"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "https://www.dell.com/support/kbdoc/000202194",
                  "refsource": "MISC",
                  "url": "https://www.dell.com/support/kbdoc/000202194"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "assignerShortName": "dell",
        "cveId": "CVE-2022-26858",
        "datePublished": "2022-09-06T20:15:17.414Z",
        "dateReserved": "2022-03-10T00:00:00.000Z",
        "dateUpdated": "2026-05-27T12:57:23.397Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2022-22567 (GCVE-0-2022-22567)

    Vulnerability from nvd – Published: 2022-02-09 20:00 – Updated: 2024-09-16 20:51
    VLAI
    Summary
    Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient verification of data authenticity vulnerability. An authenticated malicious user may exploit this vulnerability in order to install modified BIOS firmware.
    CWE
    • CWE-345 - Insufficient Verification of Data Authenticity
    Assigner
    dell CNA under the mitre root
    CNA scorecard C 70/100 over 459 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Dell CPG BIOS Affected: unspecified , < 1.15 (custom)
    Create a notification for this product.
    Date Public
    2022-02-07 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-03T03:14:55.853Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://www.dell.com/support/kbdoc/en-us/000195905/dsa-2022-028"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "CPG BIOS",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "1.15",
                  "status": "affected",
                  "version": "unspecified",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "datePublic": "2022-02-07T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient verification of data authenticity vulnerability. An authenticated malicious user may exploit this vulnerability in order to install modified BIOS firmware."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "LOW",
                "baseScore": 4.7,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:L",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-345",
                  "description": "CWE-345: Insufficient Verification of Data Authenticity",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2022-02-09T20:00:16.000Z",
            "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
            "shortName": "dell"
          },
          "references": [
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://www.dell.com/support/kbdoc/en-us/000195905/dsa-2022-028"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "secure@dell.com",
              "DATE_PUBLIC": "2022-02-07",
              "ID": "CVE-2022-22567",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "CPG BIOS",
                          "version": {
                            "version_data": [
                              {
                                "version_affected": "\u003c",
                                "version_value": "1.15"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "Dell"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient verification of data authenticity vulnerability. An authenticated malicious user may exploit this vulnerability in order to install modified BIOS firmware."
                }
              ]
            },
            "impact": {
              "cvss": {
                "baseScore": 4.7,
                "baseSeverity": "Medium",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:L",
                "version": "3.1"
              }
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "CWE-345: Insufficient Verification of Data Authenticity"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "https://www.dell.com/support/kbdoc/en-us/000195905/dsa-2022-028",
                  "refsource": "MISC",
                  "url": "https://www.dell.com/support/kbdoc/en-us/000195905/dsa-2022-028"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "assignerShortName": "dell",
        "cveId": "CVE-2022-22567",
        "datePublished": "2022-02-09T20:00:16.918Z",
        "dateReserved": "2022-01-04T00:00:00.000Z",
        "dateUpdated": "2024-09-16T20:51:53.564Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2022-22566 (GCVE-0-2022-22566)

    Vulnerability from nvd – Published: 2022-02-09 20:00 – Updated: 2024-09-17 01:45
    VLAI
    Summary
    Select Dell Client Commercial and Consumer platforms contain a pre-boot direct memory access (DMA) vulnerability. An authenticated attacker with physical access to the system may potentially exploit this vulnerability in order to execute arbitrary code on the device.
    CWE
    • CWE-1190 - DMA Device Enabled Too Early in Boot Phase
    Assigner
    dell CNA under the mitre root
    CNA scorecard C 70/100 over 459 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Dell CPG BIOS Affected: unspecified , < 1.15 (custom)
    Create a notification for this product.
    Date Public
    2022-02-07 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-03T03:14:55.765Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://www.dell.com/support/kbdoc/en-us/000195905/dsa-2022-028"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "CPG BIOS",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "1.15",
                  "status": "affected",
                  "version": "unspecified",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "datePublic": "2022-02-07T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Select Dell Client Commercial and Consumer platforms contain a pre-boot direct memory access (DMA) vulnerability. An authenticated attacker with physical access to the system may potentially exploit this vulnerability in order to execute arbitrary code on the device."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "PHYSICAL",
                "availabilityImpact": "HIGH",
                "baseScore": 6.9,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-1190",
                  "description": "CWE-1190: DMA Device Enabled Too Early in Boot Phase",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2022-02-09T20:00:15.000Z",
            "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
            "shortName": "dell"
          },
          "references": [
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://www.dell.com/support/kbdoc/en-us/000195905/dsa-2022-028"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "secure@dell.com",
              "DATE_PUBLIC": "2022-02-07",
              "ID": "CVE-2022-22566",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "CPG BIOS",
                          "version": {
                            "version_data": [
                              {
                                "version_affected": "\u003c",
                                "version_value": "1.15"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "Dell"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Select Dell Client Commercial and Consumer platforms contain a pre-boot direct memory access (DMA) vulnerability. An authenticated attacker with physical access to the system may potentially exploit this vulnerability in order to execute arbitrary code on the device."
                }
              ]
            },
            "impact": {
              "cvss": {
                "baseScore": 6.9,
                "baseSeverity": "Medium",
                "vectorString": "CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.1"
              }
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "CWE-1190: DMA Device Enabled Too Early in Boot Phase"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "https://www.dell.com/support/kbdoc/en-us/000195905/dsa-2022-028",
                  "refsource": "MISC",
                  "url": "https://www.dell.com/support/kbdoc/en-us/000195905/dsa-2022-028"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "assignerShortName": "dell",
        "cveId": "CVE-2022-22566",
        "datePublished": "2022-02-09T20:00:15.542Z",
        "dateReserved": "2022-01-04T00:00:00.000Z",
        "dateUpdated": "2024-09-17T01:45:36.114Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2021-36342 (GCVE-0-2021-36342)

    Vulnerability from nvd – Published: 2022-01-24 20:10 – Updated: 2026-10-07 18:49
    VLAI
    Summary
    Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-07 18:48 UTC
    CWE
    • CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
    Assigner
    dell CNA under the mitre root
    CNA scorecard C 70/100 over 459 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Dell CPG BIOS Affected: unspecified , < 1.14 (custom)
    Create a notification for this product.
    Date Public
    2021-01-12 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-04T00:54:51.436Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://www.dell.com/support/kbdoc/en-us/000193321/dsa-2021-240"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2021-36342",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-10-07T18:48:59.560829Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-10-07T18:49:16.815Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "CPG BIOS",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "1.14",
                  "status": "affected",
                  "version": "unspecified",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "datePublic": "2021-01-12T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-119",
                  "description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2022-01-24T20:10:18.000Z",
            "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
            "shortName": "dell"
          },
          "references": [
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://www.dell.com/support/kbdoc/en-us/000193321/dsa-2021-240"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "secure@dell.com",
              "DATE_PUBLIC": "2021-01-12",
              "ID": "CVE-2021-36342",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "CPG BIOS",
                          "version": {
                            "version_data": [
                              {
                                "version_affected": "\u003c",
                                "version_value": "1.14"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "Dell"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM."
                }
              ]
            },
            "impact": {
              "cvss": {
                "baseScore": 7.5,
                "baseSeverity": "High",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.1"
              }
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "https://www.dell.com/support/kbdoc/en-us/000193321/dsa-2021-240",
                  "refsource": "MISC",
                  "url": "https://www.dell.com/support/kbdoc/en-us/000193321/dsa-2021-240"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "assignerShortName": "dell",
        "cveId": "CVE-2021-36342",
        "datePublished": "2022-01-24T20:10:18.115Z",
        "dateReserved": "2021-07-08T00:00:00.000Z",
        "dateUpdated": "2026-10-07T18:49:16.815Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2021-21574 (GCVE-0-2021-21574)

    Vulnerability from nvd – Published: 2021-06-24 17:00 – Updated: 2024-09-16 21:08
    VLAI
    Summary
    Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions.
    CWE
    • CWE-121 - Stack-based Buffer Overflow
    Assigner
    dell CNA under the mitre root
    CNA scorecard C 70/100 over 459 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Dell BIOSConnect Affected: unspecified , < Gen 11, Gen 10 (custom)
    Create a notification for this product.
    Date Public
    2021-06-24 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-03T18:16:23.464Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://www.dell.com/support/kbdoc/en-us/000188682"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "BIOSConnect",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "Gen 11, Gen 10",
                  "status": "affected",
                  "version": "unspecified",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "datePublic": "2021-06-24T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-121",
                  "description": "CWE-121: Stack-based Buffer Overflow",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2021-06-24T17:00:19.000Z",
            "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
            "shortName": "dell"
          },
          "references": [
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://www.dell.com/support/kbdoc/en-us/000188682"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "secure@dell.com",
              "DATE_PUBLIC": "2021-06-24",
              "ID": "CVE-2021-21574",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "BIOSConnect",
                          "version": {
                            "version_data": [
                              {
                                "version_affected": "\u003c",
                                "version_value": "Gen 11, Gen 10"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "Dell"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions."
                }
              ]
            },
            "impact": {
              "cvss": {
                "baseScore": 7.2,
                "baseSeverity": "High",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
                "version": "3.1"
              }
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "CWE-121: Stack-based Buffer Overflow"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "https://www.dell.com/support/kbdoc/en-us/000188682",
                  "refsource": "MISC",
                  "url": "https://www.dell.com/support/kbdoc/en-us/000188682"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "assignerShortName": "dell",
        "cveId": "CVE-2021-21574",
        "datePublished": "2021-06-24T17:00:19.574Z",
        "dateReserved": "2021-01-04T00:00:00.000Z",
        "dateUpdated": "2024-09-16T21:08:05.986Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2021-21573 (GCVE-0-2021-21573)

    Vulnerability from nvd – Published: 2021-06-24 17:00 – Updated: 2024-09-17 01:11
    VLAI
    Summary
    Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions.
    CWE
    • CWE-121 - Stack-based Buffer Overflow
    Assigner
    dell CNA under the mitre root
    CNA scorecard C 70/100 over 459 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Dell BIOSConnect Affected: unspecified , < Gen 11, Gen 10 (custom)
    Create a notification for this product.
    Date Public
    2021-06-24 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-03T18:16:23.393Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://www.dell.com/support/kbdoc/en-us/000188682"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "BIOSConnect",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "Gen 11, Gen 10",
                  "status": "affected",
                  "version": "unspecified",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "datePublic": "2021-06-24T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-121",
                  "description": "CWE-121: Stack-based Buffer Overflow",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2021-06-24T17:00:18.000Z",
            "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
            "shortName": "dell"
          },
          "references": [
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://www.dell.com/support/kbdoc/en-us/000188682"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "secure@dell.com",
              "DATE_PUBLIC": "2021-06-24",
              "ID": "CVE-2021-21573",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "BIOSConnect",
                          "version": {
                            "version_data": [
                              {
                                "version_affected": "\u003c",
                                "version_value": "Gen 11, Gen 10"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "Dell"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions."
                }
              ]
            },
            "impact": {
              "cvss": {
                "baseScore": 7.2,
                "baseSeverity": "High",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
                "version": "3.1"
              }
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "CWE-121: Stack-based Buffer Overflow"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "https://www.dell.com/support/kbdoc/en-us/000188682",
                  "refsource": "MISC",
                  "url": "https://www.dell.com/support/kbdoc/en-us/000188682"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "assignerShortName": "dell",
        "cveId": "CVE-2021-21573",
        "datePublished": "2021-06-24T17:00:18.090Z",
        "dateReserved": "2021-01-04T00:00:00.000Z",
        "dateUpdated": "2024-09-17T01:11:41.809Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2021-21572 (GCVE-0-2021-21572)

    Vulnerability from nvd – Published: 2021-06-24 17:00 – Updated: 2024-09-16 19:30
    VLAI
    Summary
    Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions.
    CWE
    • CWE-122 - Heap-based Buffer Overflow
    Assigner
    dell CNA under the mitre root
    CNA scorecard C 70/100 over 459 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Dell BIOSConnect Affected: unspecified , < Gen 11, Gen 10 (custom)
    Create a notification for this product.
    Date Public
    2021-06-24 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-03T18:16:23.404Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://www.dell.com/support/kbdoc/en-us/000188682"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "BIOSConnect",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "Gen 11, Gen 10",
                  "status": "affected",
                  "version": "unspecified",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "datePublic": "2021-06-24T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-122",
                  "description": "CWE-122: Heap-based Buffer Overflow",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2021-06-24T17:00:16.000Z",
            "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
            "shortName": "dell"
          },
          "references": [
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://www.dell.com/support/kbdoc/en-us/000188682"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "secure@dell.com",
              "DATE_PUBLIC": "2021-06-24",
              "ID": "CVE-2021-21572",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "BIOSConnect",
                          "version": {
                            "version_data": [
                              {
                                "version_affected": "\u003c",
                                "version_value": "Gen 11, Gen 10"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "Dell"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions."
                }
              ]
            },
            "impact": {
              "cvss": {
                "baseScore": 7.2,
                "baseSeverity": "High",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
                "version": "3.1"
              }
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "CWE-122: Heap-based Buffer Overflow"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "https://www.dell.com/support/kbdoc/en-us/000188682",
                  "refsource": "MISC",
                  "url": "https://www.dell.com/support/kbdoc/en-us/000188682"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "assignerShortName": "dell",
        "cveId": "CVE-2021-21572",
        "datePublished": "2021-06-24T17:00:16.600Z",
        "dateReserved": "2021-01-04T00:00:00.000Z",
        "dateUpdated": "2024-09-16T19:30:31.142Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2021-21571 (GCVE-0-2021-21571)

    Vulnerability from nvd – Published: 2021-06-24 17:00 – Updated: 2024-09-16 17:14
    VLAI
    Summary
    Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability using a person-in-the-middle attack which may lead to a denial of service and payload tampering.
    CWE
    • CWE-295 - Improper Certificate Validation
    Assigner
    dell CNA under the mitre root
    CNA scorecard C 70/100 over 459 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Dell UEFI BIOS https stack Affected: Gen 11, Gen 10
    Create a notification for this product.
    Date Public
    2021-06-24 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-03T18:16:23.284Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://www.dell.com/support/kbdoc/en-us/000188682"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "UEFI BIOS https stack",
              "vendor": "Dell",
              "versions": [
                {
                  "status": "affected",
                  "version": "Gen 11, Gen 10"
                }
              ]
            }
          ],
          "datePublic": "2021-06-24T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability using a person-in-the-middle attack which may lead to a denial of service and payload tampering."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 5.9,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "LOW",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-295",
                  "description": "CWE-295: Improper Certificate Validation",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2021-06-24T17:00:14.000Z",
            "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
            "shortName": "dell"
          },
          "references": [
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://www.dell.com/support/kbdoc/en-us/000188682"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "secure@dell.com",
              "DATE_PUBLIC": "2021-06-24",
              "ID": "CVE-2021-21571",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "UEFI BIOS https stack",
                          "version": {
                            "version_data": [
                              {
                                "version_affected": "=",
                                "version_value": "Gen 11, Gen 10"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "Dell"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability using a person-in-the-middle attack which may lead to a denial of service and payload tampering."
                }
              ]
            },
            "impact": {
              "cvss": {
                "baseScore": 5.9,
                "baseSeverity": "Medium",
                "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H",
                "version": "3.1"
              }
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "CWE-295: Improper Certificate Validation"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "https://www.dell.com/support/kbdoc/en-us/000188682",
                  "refsource": "MISC",
                  "url": "https://www.dell.com/support/kbdoc/en-us/000188682"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "assignerShortName": "dell",
        "cveId": "CVE-2021-21571",
        "datePublished": "2021-06-24T17:00:15.004Z",
        "dateReserved": "2021-01-04T00:00:00.000Z",
        "dateUpdated": "2024-09-16T17:14:18.169Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2023-43078 (GCVE-0-2023-43078)

    Vulnerability from cvelistv5 – Published: 2024-08-28 05:33 – Updated: 2024-08-28 22:31
    VLAI
    Summary
    Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installation resulting in arbitrary folder deletion, which could lead to Privilege Escalation or Denial of Service.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2024-08-28 14:17 UTC
    CWE
    • CWE-59 - Improper Link Resolution Before File Access ('Link Following')
    Assigner
    dell CNA under the mitre root
    CNA scorecard C 70/100 over 459 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Dell Dell Client Platform, Dell Dock Firmware Affected: N/A , < 1.27.0 (semver)
    Affected: N/A , < 1.22.0 (semver)
    Affected: N/A , < 1.14.1 (semver)
    Affected: N/A , < 1.11.0 (semver)
    Affected: N/A , < 1.19.0 (semver)
    Affected: N/A , < 1.20.0 (semver)
    Affected: N/A , < 1.24.0 (semver)
    Affected: N/A , < 1.26.0 (semver)
    Affected: N/A , < 1.12.0 (semver)
    Affected: N/A , < 1.28.0 (semver)
    Affected: N/A , < 1.17.0 (semver)
    Affected: N/A , < 1.23.0 (semver)
    Affected: N/A , < 1.30.0 (semver)
    Affected: N/A , < 2.25.0 (semver)
    Affected: N/A , < 1.16.0 (semver)
    Affected: N/A , < 1.12.1 (semver)
    Affected: N/A , < 2.24.0 (semver)
    Affected: N/A , < 1.8.0 (semver)
    Affected: N/A , < 1.18.0 (semver)
    Affected: N/A , < 1.29.0 (semver)
    Affected: N/A , < 1.24.1 (semver)
    Affected: N/A , < 1.22.1 (semver)
    Affected: N/A , < 1.31.0 (semver)
    Affected: N/A , < 1.25.0 (semver)
    Affected: N/A , < 1.10.0 (semver)
    Affected: N/A , < 1.34.0 (semver)
    Affected: N/A , < 1.32.0 (semver)
    Affected: N/A , < 1.36.0 (semver)
    Affected: N/A , < 1.10.1 (semver)
    Affected: N/A , < 1.36.2 (semver)
    Affected: N/A , < 1.21.1 (semver)
    Affected: N/A , < 1.33.0 (semver)
    Affected: N/A , < 1.35.0 (semver)
    Affected: N/A , < 1.34.2 (semver)
    Affected: N/A , < 1.30.1 (semver)
    Affected: N/A , < 1.15.0 (semver)
    Affected: N/A , < 2.22.0 (semver)
    Affected: N/A , < 2.16.0 (semver)
    Affected: N/A , < 1.22.2 (semver)
    Affected: N/A , < 1.1.37 (semver)
    Affected: N/A , < 1.27.1 (semver)
    Affected: N/A , < 3.3.2 (semver)
    Affected: N/A , < 1.28.1 (semver)
    Affected: N/A , < 2.11.1 (semver)
    Affected: N/A , < 2.28.0 (semver)
    Affected: N/A , < 1.28.8 (semver)
    Affected: N/A , < 1.1.16 (semver)
    Affected: N/A , < 1.20.1 (semver)
    Affected: N/A , < 1.9.0 (semver)
    Affected: N/A , < 1.6.1 (semver)
    Affected: N/A , < 1.1.15 (semver)
    Affected: N/A , < 2.23.0 (semver)
    Affected: N/A , < 3.20.0 (semver)
    Affected: N/A , < 1.19.1 (semver)
    Affected: N/A , < 2.9.0 (semver)
    Affected: N/A , < 1.13.0 (semver)
    Affected: N/A , < 1.0.14.20 (semver)
    Affected: N/A , < 01.00.15 (semver)
    Affected: N/A , < 01.00.36 (semver)
    Affected: N/A , < 4.62.156.006 (semver)
    Affected: N/A , < 4.66.128.015 (semver)
    Affected: N/A , < 4.65.111.022 (semver)
    Affected: N/A , < 4.61.124.014 (semver)
    Affected: N/A , < 4.46.147.004 (semver)
    Affected: N/A , < 4.46.134.013 (semver)
    Affected: N/A , < 4.66.131.016 (semver)
    Affected: N/A , < 4.46.135.009 (semver)
    Affected: N/A , < 4.65.162.003 (semver)
    Affected: N/A , < 4.65.119.017 (semver)
    Affected: N/A , < 4.62.140.014 (semver)
    Affected: N/A , < 4.46.166.001 (semver)
    Affected: N/A , < 4.65.163.002 (semver)
    Affected: N/A , < 4.62.139.013 (semver)
    Affected: N/A , < 4.46.112.015 (semver)
    Affected: N/A , < 4.65.116.019 (semver)
    Affected: N/A , < 4.46.143.009 (semver)
    Affected: N/A , < 4.46.145.004 (semver)
    Affected: N/A , < 4.65.117.031 (semver)
    Affected: N/A , < 4.62.102.024 (semver)
    Affected: N/A , < 4.65.108.018 (semver)
    Affected: N/A , < 4.69.120.013 (semver)
    Affected: N/A , < 4.46.106.031 (semver)
    Affected: N/A , < 7.2.2.0 (semver)
    Affected: N/A , < 74.64 (semver)
    Create a notification for this product.
    dell alienware_m15_r6_firmware Affected: 0 , < 1.27.0 (semver)
        cpe:2.3:o:dell:wyse_5070_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_3480_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_3580_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_3583_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3540_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3561_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3640_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_7550_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_7560_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_7750_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_7760_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_7780_all-in-one_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_7480_all-in-one_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_5480_all-in-one_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_9420_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5521_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5500_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5400_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3510_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3410_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3320_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_3580_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_3480_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:alienware_m15_r6_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell alienware_m15_r7_firmware Affected: 0 , < 1.22.0 (semver)
        cpe:2.3:o:dell:xps_17_9720_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:xps_13_9300_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:wyse_5470_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_14_3420_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_15_3520_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_5570_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_5080_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_7070_ultra_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3120_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3310_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5310_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5310_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_15_3520_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:g16_7620_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:g15_5510_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:g15_5520_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:alienware_m15_r7_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell alienware_m16_r1_firmware Affected: 0 , < 1.14.1 (semver)
        cpe:2.3:o:dell:alienware_m18_r1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:alienware_m16_r1_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell alienware_x14_r2_firmware Affected: 0 , < 1.11.0 (semver)
        cpe:2.3:o:dell:vostro_16_5630_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_3020_small_desktop_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_3020_tower_desktop_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3480_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_all-in-one_7410_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_micro_7010_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_micro_plus_7010_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_small_form_factor_7010_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_small_form_factor_plus_7010_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_tower_7010_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_tower_plus_7010_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5440_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7340_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7440_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7640_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_3020_desktop_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_3020_small_desktop_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_16_5630_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_16_7630_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_14_5430_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_14_7430_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:chengming_3911_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:chengming_3910_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:alienware_x16_r1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:alienware_x14_r2_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell chengming_3900_firmware Affected: 0 , < 1.19.0 (semver)
        cpe:2.3:o:dell:xps_13_9305_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_3710_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_3910_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_5620_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3470_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_5470_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_xe4_tower_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_7000_micro_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_7000_small_form_factor_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_7000_tower_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_7000_xe_micro_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_5000_micro_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_5000_small_form_factor_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_5000_tower_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_3000_micro_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_3000_small_form_factor_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_3000_tower_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3330_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5330_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5430_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5431_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_3910_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_16_5620_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_14_5420_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:chengming_3900_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell chengming_3988_firmware Affected: 0 , < 1.20.0 (semver)
        cpe:2.3:o:dell:xps_15_9520_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_15_7510_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_3471_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_3671_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_7620_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3571_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_5570_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5531_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7330_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7430_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7530_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_9430_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_3671_firmware:*:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_3471_firmware:*:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_16_plus_7620_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_16_7610_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_15_7510_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_14_plus_7420_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:chengming_3988_firmware:*:*:*:*:*:*:*:*
    Create a notification for this product.
    dell chengming_3991_firmware Affected: 0 , < 1.24.0 (semver)
        cpe:2.3:o:dell:xps_17_9710_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_5090_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3550_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_5760_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_3070_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_5070_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_7070_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_7071_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_9510_2in1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5510_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5410_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_7700_all-in-one_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_7490_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_5401_aio_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_5401_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_5400_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:chengming_3990_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:chengming_3991_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell g15_5511_firmware Affected: 0 , < 1.26.0 (semver)
        cpe:2.3:o:dell:xps_15_9500_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_7500_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_3590_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_15_3510_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_5550_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_3280_all-in-one_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_5270_all-in-one_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_7470_all-in-one_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_7770_all-in-one_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7410_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7310_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7210_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7200_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5421_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_7501_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_7500_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_15_3511_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:g15_5511_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell g15_5530_firmware Affected: 0 , < 1.12.0 (semver)
        cpe:2.3:o:dell:latitude_7230_rugged_extreme_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3140_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_16_plus_7630_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_14_plus_7430_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:g16_7630_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:g15_5530_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell g3_3500_firmware Affected: 0 , < 1.28.0 (semver)
        cpe:2.3:o:dell:xps_17_9700_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_3400_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_3401_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_3500_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_3501_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_5402_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_5502_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3541_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_5750_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_xe3_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_7060_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_5060_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_3060_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5401_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5501_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7300_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7320_detachable_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7400_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_3501_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_5402_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_5406_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_5409_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_5502_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_5509_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_7306_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_7506_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_7706_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3430_tower_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:g5_5500_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:g3_3500_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell g5_5000_firmware Affected: 0 , < 1.17.0 (semver)
        cpe:2.3:o:dell:latitude_9330_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_16_7620_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_14_7420_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:g5_5000_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell g5_5090_firmware Affected: 0 , < 1.23.0 (semver)
        cpe:2.3:o:dell:xps_13_7390_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:wyse_5470_all-in-one_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_5880_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3240_compact_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3440_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_7080_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7330_rugged_laptop_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5430_rugged_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3310_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3431_tower_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:g5_5090_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell dell_g7_7700_firmware Affected: 0 , < 1.30.0 (semver)
        cpe:2.3:o:dell:precision_3530_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_7760_all-in-one_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_7460_all_in_one_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_5260_all-in-one_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5491_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5591_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:dell_g7_7500_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:dell_g7_7700_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell precision_3630_tower_firmware Affected: 0 , < 2.25.0 (semver)
        cpe:2.3:o:dell:vostro_13_5310_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_13_5310_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3630_tower_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_13_5320_firmware Affected: 0 , < 1.16.0 (semver)
        cpe:2.3:o:dell:vostro_5320_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3530_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3430_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_13_5320_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_13_5330_firmware Affected: 0 , < 1.12.1 (semver)
        cpe:2.3:o:dell:inspiron_13_5330_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_14_5410_firmware Affected: 0 , < 2.24.0 (semver)
        cpe:2.3:o:dell:vostro_15_5510_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_14_5410_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_5410_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_15_5510_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_15_5518_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_14_5418_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_14_5410_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_15_3530_firmware Affected: 0 , < 1.8.0 (semver)
        cpe:2.3:o:dell:vostro_14_3430_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_15_3530_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_5480_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_9440_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_27_7720_all-in-one_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_24_5420_all-in-one_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_15_3530_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_24_5411_all-in-one_firmware Affected: 0 , < 1.18.0 (semver)
        cpe:2.3:o:dell:inspiron_27_7710_all-in-one_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_24_5410_all-in-one_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_24_5411_all-in-one_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_3593_firmware Affected: 0 , < 1.29.0 (semver)
        cpe:2.3:o:dell:xps_13_7390_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_7740_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_7540_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7424_rugged_extreme_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5420_rugged_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5424_rugged_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5300_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5300_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3301_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_5593_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_3793_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_3593_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_3880_firmware Affected: 0 , < 1.24.1 (semver)
        cpe:2.3:o:dell:inspiron_3881_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_3880_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_3891_firmware Affected: 0 , < 1.22.1 (semver)
        cpe:2.3:o:dell:vostro_5890_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_3890_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:vostro_3690_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3450_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_3891_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_5301_firmware Affected: 0 , < 1.31.0 (semver)
        cpe:2.3:o:dell:vostro_5301_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_7730_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_7530_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5290_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3500_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3400_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3190_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3190_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_7400_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_7300_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:inspiron_5301_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_3300_firmware Affected: 0 , < 1.25.0 (semver)
        cpe:2.3:o:dell:xps_15_7590_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:xps_15_9510_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_5560_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_5540_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3551_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_7090_ultra_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_3090_ultra_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_9410_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7400_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5511_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5411_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3300_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_3340_firmware Affected: 0 , < 1.10.0 (semver)
        cpe:2.3:o:dell:xps_15_9530_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_5680_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3540_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3440_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3340_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_3420_firmware Affected: 0 , < 1.34.0 (semver)
        cpe:2.3:o:dell:precision_5530_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3520_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_3420_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_5290_firmware Affected: 0 , < 1.32.0 (semver)
        cpe:2.3:o:dell:latitude_5590_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5490_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5290_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_5320_firmware Affected: 0 , < 1.36.0 (semver)
        cpe:2.3:o:dell:precision_3560_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5520_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5320_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_5340_firmware Affected: 0 , < 1.10.1 (semver)
        cpe:2.3:o:dell:precision_3580_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3581_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5540_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5340_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_5420_firmware Affected: 0 , < 1.36.2 (semver)
        cpe:2.3:o:dell:latitude_5420_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_5530_firmware Affected: 0 , < 1.21.1 (semver)
        cpe:2.3:o:dell:precision_3570_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_5530_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_7220_rugged_extreme_firmware Affected: 0 , < 1.33.0 (semver)
        cpe:2.3:o:dell:latitude_rugged_7220_extreme_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7220_rugged_extreme_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_7290_firmware Affected: 0 , < 1.35.0 (semver)
        cpe:2.3:o:dell:latitude_7490_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7390_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7290_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_7320_firmware Affected: 0 , < 1.34.2 (semver)
        cpe:2.3:o:dell:latitude_7520_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7420_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:latitude_7320_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_9520_firmware Affected: 0 , < 1.30.1 (semver)
        cpe:2.3:o:dell:latitude_9520_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell optiplex_3000_thin_client_firmware Affected: 0 , < 1.15.0 (semver)
        cpe:2.3:o:dell:optiplex_3000_thin_client_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell optiplex_3080_firmware Affected: 0 , < 2.22.0 (semver)
        cpe:2.3:o:dell:xps_13_9310_2-in-1_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_3080_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell optiplex_3090_firmware Affected: 0 , < 2.16.0 (semver)
        cpe:2.3:o:dell:xps_8940_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_3090_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell optiplex_5090_tower_firmware Affected: 0 , < 1.22.2 (semver)
        cpe:2.3:o:dell:optiplex_7090_tower_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_5090_micro_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_5090_small_form_factor_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_5090_tower_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell optiplex_5400_all-in-one_firmware Affected: 0 , < 1.1.37 (semver)
        cpe:2.3:o:dell:optiplex_7400_all-in-one_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_5400_all-in-one_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell optiplex_5490_all-in-one_firmware Affected: 0 , < 1.27.1 (semver)
        cpe:2.3:o:dell:optiplex_7490_all-in-one_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:optiplex_5490_all-in-one_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell precision_3260_xe_compact_firmware Affected: 0 , < 3.3.2 (semver)
        cpe:2.3:o:dell:precision_3460_small_form_factor_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3460_xe_small_form_factor_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3260_compact_firmware:-:*:*:*:*:*:*:*
        cpe:2.3:o:dell:precision_3260_xe_compact_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell precision_3650_tower_firmware Affected: 0 , < 1.28.1 (semver)
        cpe:2.3:o:dell:precision_3650_tower_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell precision_3660_firmware Affected: 0 , < 2.11.1 (semver)
        cpe:2.3:o:dell:precision_3660_firmware:-:*:*:*:*:*:*:*
    Create a notification for this product.
    Date Public
    2024-02-22 06:30
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "affected": [
              {
                "cpes": [
                  "cpe:2.3:o:dell:wyse_5070_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_3480_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_3580_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_3583_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3540_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3561_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3640_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_7550_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_7560_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_7750_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_7760_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_7780_all-in-one_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_7480_all-in-one_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_5480_all-in-one_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_9420_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5521_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5500_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5400_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3510_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3410_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3320_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_3580_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_3480_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:alienware_m15_r6_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "alienware_m15_r6_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.27.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:xps_17_9720_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:xps_13_9300_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:wyse_5470_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_14_3420_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_15_3520_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_5570_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_5080_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_7070_ultra_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3120_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3310_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5310_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5310_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_15_3520_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:g16_7620_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:g15_5510_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:g15_5520_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:alienware_m15_r7_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "alienware_m15_r7_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.22.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:alienware_m18_r1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:alienware_m16_r1_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "alienware_m16_r1_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.14.1",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:vostro_16_5630_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_3020_small_desktop_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_3020_tower_desktop_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3480_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_all-in-one_7410_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_micro_7010_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_micro_plus_7010_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_small_form_factor_7010_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_small_form_factor_plus_7010_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_tower_7010_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_tower_plus_7010_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5440_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7340_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7440_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7640_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_3020_desktop_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_3020_small_desktop_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_16_5630_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_16_7630_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_14_5430_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_14_7430_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:chengming_3911_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:chengming_3910_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:alienware_x16_r1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:alienware_x14_r2_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "alienware_x14_r2_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.11.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:xps_13_9305_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_3710_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_3910_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_5620_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3470_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_5470_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_xe4_tower_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_7000_micro_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_7000_small_form_factor_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_7000_tower_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_7000_xe_micro_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_5000_micro_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_5000_small_form_factor_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_5000_tower_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_3000_micro_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_3000_small_form_factor_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_3000_tower_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3330_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5330_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5430_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5431_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_3910_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_16_5620_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_14_5420_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:chengming_3900_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "chengming_3900_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.19.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:xps_15_9520_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_15_7510_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_3471_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_3671_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_7620_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3571_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_5570_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5531_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7330_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7430_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7530_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_9430_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_3671_firmware:*:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_3471_firmware:*:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_16_plus_7620_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_16_7610_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_15_7510_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_14_plus_7420_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:chengming_3988_firmware:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "chengming_3988_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.20.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:xps_17_9710_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_5090_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3550_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_5760_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_3070_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_5070_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_7070_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_7071_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_9510_2in1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5510_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5410_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_7700_all-in-one_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_7490_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_5401_aio_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_5401_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_5400_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:chengming_3990_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:chengming_3991_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "chengming_3991_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.24.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:xps_15_9500_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_7500_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_3590_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_15_3510_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_5550_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_3280_all-in-one_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_5270_all-in-one_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_7470_all-in-one_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_7770_all-in-one_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7410_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7310_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7210_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7200_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5421_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_7501_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_7500_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_15_3511_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:g15_5511_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "g15_5511_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.26.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:latitude_7230_rugged_extreme_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3140_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_16_plus_7630_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_14_plus_7430_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:g16_7630_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:g15_5530_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "g15_5530_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.12.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:xps_17_9700_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_3400_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_3401_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_3500_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_3501_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_5402_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_5502_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3541_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_5750_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_xe3_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_7060_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_5060_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_3060_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5401_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5501_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7300_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7320_detachable_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7400_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_3501_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_5402_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_5406_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_5409_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_5502_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_5509_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_7306_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_7506_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_7706_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3430_tower_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:g5_5500_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:g3_3500_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "g3_3500_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.28.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:latitude_9330_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_16_7620_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_14_7420_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:g5_5000_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "g5_5000_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.17.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:xps_13_7390_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:wyse_5470_all-in-one_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_5880_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3240_compact_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3440_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_7080_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7330_rugged_laptop_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5430_rugged_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3310_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3431_tower_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:g5_5090_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "g5_5090_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.23.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:precision_3530_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_7760_all-in-one_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_7460_all_in_one_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_5260_all-in-one_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5491_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5591_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:dell_g7_7500_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:dell_g7_7700_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "dell_g7_7700_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.30.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:vostro_13_5310_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_13_5310_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3630_tower_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "precision_3630_tower_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "2.25.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:vostro_5320_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3530_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3430_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_13_5320_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "inspiron_13_5320_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.16.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:inspiron_13_5330_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "inspiron_13_5330_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.12.1",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:vostro_15_5510_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_14_5410_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_5410_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_15_5510_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_15_5518_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_14_5418_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_14_5410_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "inspiron_14_5410_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "2.24.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:vostro_14_3430_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_15_3530_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_5480_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_9440_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_27_7720_all-in-one_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_24_5420_all-in-one_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_15_3530_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "inspiron_15_3530_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.8.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:inspiron_27_7710_all-in-one_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_24_5410_all-in-one_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_24_5411_all-in-one_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "inspiron_24_5411_all-in-one_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.18.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:xps_13_7390_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_7740_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_7540_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7424_rugged_extreme_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5420_rugged_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5424_rugged_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5300_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5300_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3301_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_5593_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_3793_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_3593_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "inspiron_3593_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.29.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:inspiron_3881_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_3880_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "inspiron_3880_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.24.1",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:vostro_5890_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_3890_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:vostro_3690_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3450_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_3891_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "inspiron_3891_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.22.1",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:vostro_5301_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_7730_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_7530_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5290_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3500_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3400_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3190_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3190_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_7400_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_7300_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:inspiron_5301_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "inspiron_5301_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.31.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:xps_15_7590_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:xps_15_9510_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_5560_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_5540_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3551_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_7090_ultra_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_3090_ultra_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_9410_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7400_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5511_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5411_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3300_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "latitude_3300_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.25.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:xps_15_9530_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_5680_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3540_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3440_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3340_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "latitude_3340_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.10.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:precision_5530_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3520_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_3420_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "latitude_3420_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.34.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:latitude_5590_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5490_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5290_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "latitude_5290_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.32.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:precision_3560_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5520_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5320_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "latitude_5320_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.36.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:precision_3580_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3581_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5540_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5340_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "latitude_5340_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.10.1",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:latitude_5420_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "latitude_5420_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.36.2",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:precision_3570_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_5530_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "latitude_5530_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.21.1",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:latitude_rugged_7220_extreme_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7220_rugged_extreme_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "latitude_7220_rugged_extreme_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.33.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:latitude_7490_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7390_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7290_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "latitude_7290_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.35.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:latitude_7520_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7420_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:latitude_7320_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "latitude_7320_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.34.2",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:latitude_9520_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "latitude_9520_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.30.1",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:optiplex_3000_thin_client_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "optiplex_3000_thin_client_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.15.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:xps_13_9310_2-in-1_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_3080_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "optiplex_3080_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "2.22.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:xps_8940_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_3090_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "optiplex_3090_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "2.16.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:optiplex_7090_tower_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_5090_micro_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_5090_small_form_factor_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_5090_tower_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "optiplex_5090_tower_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.22.2",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:optiplex_7400_all-in-one_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_5400_all-in-one_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "optiplex_5400_all-in-one_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.1.37",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:optiplex_7490_all-in-one_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:optiplex_5490_all-in-one_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "optiplex_5490_all-in-one_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.27.1",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:precision_3460_small_form_factor_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3460_xe_small_form_factor_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3260_compact_firmware:-:*:*:*:*:*:*:*",
                  "cpe:2.3:o:dell:precision_3260_xe_compact_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "precision_3260_xe_compact_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "3.3.2",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:precision_3650_tower_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "precision_3650_tower_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.28.1",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dell:precision_3660_firmware:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "precision_3660_firmware",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "2.11.1",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2023-43078",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-08-28T14:17:19.963412Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-08-28T22:31:00.645Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Dell Client Platform, Dell Dock Firmware",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "1.27.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.22.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.14.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.11.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.19.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.20.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.24.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.26.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.12.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.28.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.17.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.23.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.30.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.25.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.16.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.12.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.24.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.8.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.18.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.29.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.24.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.22.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.25.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.10.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.34.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.32.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.36.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.10.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.36.2",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.21.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.33.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.35.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.34.2",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.30.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.15.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.22.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.16.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.22.2",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.1.37",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.27.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "3.3.2",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.28.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.11.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.28.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.28.8",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.1.16",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.20.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.9.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.6.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.1.15",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.23.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "3.20.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.19.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.9.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.13.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.0.14.20",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "01.00.15",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "01.00.36",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.62.156.006",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.66.128.015",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.65.111.022",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.61.124.014",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.46.147.004",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.46.134.013",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.66.131.016",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.46.135.009",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.65.162.003",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.65.119.017",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.62.140.014",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.46.166.001",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.65.163.002",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.62.139.013",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.46.112.015",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.65.116.019",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.46.143.009",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.46.145.004",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.65.117.031",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.62.102.024",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.65.108.018",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.69.120.013",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "4.46.106.031",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "7.2.2.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "74.64",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "datePublic": "2024-02-22T06:30:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installation resulting in arbitrary folder deletion, which could lead to Privilege Escalation or Denial of Service."
                }
              ],
              "value": "Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installation resulting in arbitrary folder deletion, which could lead to Privilege Escalation or Denial of Service."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 6.7,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-59",
                  "description": "CWE-59: Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2024-08-28T05:33:16.899Z",
            "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
            "shortName": "dell"
          },
          "references": [
            {
              "tags": [
                "vendor-advisory"
              ],
              "url": "https://www.dell.com/support/kbdoc/en-us/000217981/dsa-2023-362-security-update-for-dell-dock-firmware-and-dell-client-platform-for-an-improper-link-resolution-vulnerability"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "assignerShortName": "dell",
        "cveId": "CVE-2023-43078",
        "datePublished": "2024-08-28T05:33:16.899Z",
        "dateReserved": "2023-09-15T07:02:11.648Z",
        "dateUpdated": "2024-08-28T22:31:00.645Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2024-0158 (GCVE-0-2024-0158)

    Vulnerability from cvelistv5 – Published: 2024-07-02 06:20 – Updated: 2024-08-01 17:41
    VLAI
    Summary
    Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2024-07-02 14:21 UTC
    CWE
    • CWE-20 - Improper Input Validation
    Assigner
    dell CNA under the mitre root
    CNA scorecard C 70/100 over 459 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Dell CPG BIOS Affected: N/A , < 1.28.0 (semver)
    Affected: N/A , < 1.23.0 (semver)
    Affected: N/A , < 1.15.0 (semver)
    Affected: N/A , < 1.2.1 (semver)
    Affected: N/A , < 1.12.1 (semver)
    Affected: N/A , < 1.2.0 (semver)
    Affected: N/A , < 1.20.0 (semver)
    Affected: N/A , < 1.12.0 (semver)
    Affected: N/A , < 1.26.0 (semver)
    Affected: N/A , < 1.27.0 (semver)
    Affected: N/A , < 1.13.0 (semver)
    Affected: N/A , < 1.29.0 (semver)
    Affected: N/A , < 1.19.0 (semver)
    Affected: N/A , < 1.25.0 (semver)
    Affected: N/A , < 1.31.0 (semver)
    Affected: N/A , < 2.27.0 (semver)
    Affected: N/A , < 2.35.0 (semver)
    Affected: N/A , < 2.39.0 (semver)
    Affected: N/A , < 1.17.0 (semver)
    Affected: N/A , < 1.24.0 (semver)
    Affected: N/A , < 2.26.0 (semver)
    Affected: N/A , < 1.13.1 (semver)
    Affected: N/A , < 2.25.0 (semver)
    Affected: N/A , < 1.3.1 (semver)
    Affected: N/A , < 1.18.0 (semver)
    Affected: N/A , < 1.21.0 (semver)
    Affected: N/A , < 1.22.0 (semver)
    Affected: N/A , < 1.9.0 (semver)
    Affected: N/A , < 1.3.0 (semver)
    Affected: N/A , < 1.30.0 (semver)
    Affected: N/A , < 1.32.0 (semver)
    Affected: N/A , < 1.29..0 (semver)
    Affected: N/A , < 1.45.0 (semver)
    Affected: N/A , < 1.33.0 (semver)
    Affected: N/A , < 1.11.0 (semver)
    Affected: N/A , < 1.35.0 (semver)
    Affected: N/A , < 1.34.0 (semver)
    Affected: N/A , < 1.36.0 (semver)
    Affected: N/A , < 1.36.2 (semver)
    Affected: N/A , < 1.25.1 (semver)
    Affected: N/A , < 1.21.1 (semver)
    Affected: N/A , < 1.4.1 (semver)
    Affected: N/A , < 1.49.0 (semver)
    Affected: N/A , < 1.37.0 (semver)
    Affected: N/A , < 1.34.2 (semver)
    Affected: N/A , < 1.30.1 (semver)
    Affected: N/A , < 1.16.1 (semver)
    Affected: N/A , < 2.24.0 (semver)
    Affected: N/A , < 2.18.0 (semver)
    Affected: N/A , < 1.1.38 (semver)
    Affected: N/A , < 3.3.2 (semver)
    Affected: N/A , < 2.29.0 (semver)
    Affected: N/A , < 2.12.0 (semver)
    Affected: N/A , < 2.30.0 (semver)
    Affected: N/A , < 1.30.8 (semver)
    Affected: N/A , < 1.10.0 (semver)
    Affected: N/A , < 1.26.1 (semver)
    Affected: N/A , < 1.1.17 (semver)
    Affected: N/A , < 1.20.1 (semver)
    Affected: N/A , < 1.7.0 (semver)
    Affected: N/A , < 01.03.00 (semver)
    Affected: N/A , < 1.1.16 (semver)
    Affected: N/A , < 3.21.0 (semver)
    Affected: N/A , < 2.23.0 (semver)
    Affected: N/A , < 1.19.1 (semver)
    Affected: N/A , < 2.10.0 (semver)
    Affected: N/A , < 2.18.1 (semver)
    Affected: N/A , < 1.14.0 (semver)
    Create a notification for this product.
    Date Public
    2024-03-12 06:30
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2024-0158",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-07-02T14:21:02.955425Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-07-02T14:21:13.009Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          },
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-01T17:41:16.039Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "vendor-advisory",
                  "x_transferred"
                ],
                "url": "https://www.dell.com/support/kbdoc/en-in/000220141/dsa-2024-030-security-update-for-dell-client-bios-for-an-improper-input-validation-vulnerability"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "CPG BIOS",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "1.28.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.23.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.15.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.2.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.12.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.2.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.20.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.12.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.26.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.27.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.13.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.29.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.19.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.25.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.27.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.35.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.39.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.17.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.24.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.26.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.13.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.25.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.3.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.18.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.21.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.22.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.9.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.3.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.30.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.32.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.29..0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.45.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.33.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.11.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.35.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.34.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.36.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.36.2",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.25.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.21.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.4.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.49.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.37.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.34.2",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.30.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.16.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.24.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.18.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.1.38",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "3.3.2",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.29.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.12.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.30.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.30.8",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.10.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.26.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.1.17",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.20.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.7.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "01.03.00",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.1.16",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "3.21.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.23.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.19.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.10.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "2.18.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.14.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "datePublic": "2024-03-12T06:30:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges"
                }
              ],
              "value": "Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges"
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "LOW",
                "baseScore": 5.1,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-20",
                  "description": "CWE-20: Improper Input Validation",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2024-07-02T06:20:44.735Z",
            "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
            "shortName": "dell"
          },
          "references": [
            {
              "tags": [
                "vendor-advisory"
              ],
              "url": "https://www.dell.com/support/kbdoc/en-in/000220141/dsa-2024-030-security-update-for-dell-client-bios-for-an-improper-input-validation-vulnerability"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "assignerShortName": "dell",
        "cveId": "CVE-2024-0158",
        "datePublished": "2024-07-02T06:20:44.735Z",
        "dateReserved": "2023-12-14T05:30:35.591Z",
        "dateUpdated": "2024-08-01T17:41:16.039Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2024-0160 (GCVE-0-2024-0160)

    Vulnerability from cvelistv5 – Published: 2024-06-12 06:41 – Updated: 2024-08-01 17:41
    VLAI
    Summary
    Dell Client Platform contains an incorrect authorization vulnerability. An attacker with physical access to the system could potentially exploit this vulnerability by bypassing BIOS authorization to modify settings in the BIOS.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2024-06-12 13:17 UTC
    CWE
    • CWE-863 - Incorrect Authorization
    Assigner
    dell CNA under the mitre root
    CNA scorecard C 70/100 over 459 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Dell CPG BIOS Affected: N/A , < 1.32.0 (semver)
    Create a notification for this product.
    dell cpg_bios Affected: 0 , < 1.32.0 (custom)
        cpe:2.3:o:dell:cpg_bios:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Date Public
    2024-06-11 06:30
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "affected": [
              {
                "cpes": [
                  "cpe:2.3:o:dell:cpg_bios:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "cpg_bios",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.32.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2024-0160",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-06-12T13:17:14.905056Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-06-12T13:19:06.076Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          },
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-01T17:41:16.055Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "vendor-advisory",
                  "x_transferred"
                ],
                "url": "https://www.dell.com/support/kbdoc/en-us/000224763/dsa-2024-122"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "CPG BIOS",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "1.32.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "value": "Dell would like to thank Ben McEwan, Penetration Tester at Bridewell (www.bridewell.com) for reporting this issue."
            }
          ],
          "datePublic": "2024-06-11T06:30:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "Dell Client Platform contains an incorrect authorization vulnerability. An attacker with physical access to the system could potentially exploit this vulnerability by bypassing BIOS authorization to modify settings in the BIOS."
                }
              ],
              "value": "Dell Client Platform contains an incorrect authorization vulnerability. An attacker with physical access to the system could potentially exploit this vulnerability by bypassing BIOS authorization to modify settings in the BIOS."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "PHYSICAL",
                "availabilityImpact": "HIGH",
                "baseScore": 6.8,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-863",
                  "description": "CWE-863: Incorrect Authorization",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2024-06-12T06:41:33.041Z",
            "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
            "shortName": "dell"
          },
          "references": [
            {
              "tags": [
                "vendor-advisory"
              ],
              "url": "https://www.dell.com/support/kbdoc/en-us/000224763/dsa-2024-122"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "assignerShortName": "dell",
        "cveId": "CVE-2024-0160",
        "datePublished": "2024-06-12T06:41:33.041Z",
        "dateReserved": "2023-12-14T05:30:38.641Z",
        "dateUpdated": "2024-08-01T17:41:16.055Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2024-22448 (GCVE-0-2024-22448)

    Vulnerability from cvelistv5 – Published: 2024-04-10 07:30 – Updated: 2024-08-01 22:43
    VLAI
    Summary
    Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2024-04-22 16:57 UTC
    CWE
    Assigner
    dell CNA under the mitre root
    CNA scorecard C 70/100 over 459 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Dell CPG BIOS Affected: N/A , < 1.29.0 (semver)
    Affected: N/A , < 1.16.0 (semver)
    Affected: N/A , < 1.13.0 (semver)
    Affected: N/A , < 1.28.0 (semver)
    Affected: N/A , < 1.14.0 (semver)
    Affected: N/A , < 1.31.0 (semver)
    Affected: N/A , < 1.31.1 (semver)
    Affected: N/A , < 1.31.2 (semver)
    Affected: N/A , < 1.31.3 (semver)
    Affected: N/A , < 1.31.4 (semver)
    Affected: N/A , < 1.31.5 (semver)
    Affected: N/A , < 1.31.6 (semver)
    Affected: N/A , < 1.31.7 (semver)
    Affected: N/A , < 1.31.8 (semver)
    Affected: N/A , < 1.31.9 (semver)
    Affected: N/A , < 1.31.10 (semver)
    Affected: N/A , < 1.31.11 (semver)
    Affected: N/A , < 1.31.12 (semver)
    Affected: N/A , < 1.31.13 (semver)
    Affected: N/A , < 1.31.14 (semver)
    Affected: N/A , < 1.31.15 (semver)
    Affected: N/A , < 1.31.16 (semver)
    Create a notification for this product.
    dell alienware_16_r1 Affected: 0 , < 1.13.0 (semver)
        cpe:2.3:a:dell:alienware_16_r1:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell alienware_15_r6 Affected: 0 , < 1.29.0 (semver)
        cpe:2.3:a:dell:alienware_15_r6:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell alienware_18_r1 Affected: 0 , < 1.16.0 (semver)
        cpe:2.3:a:dell:alienware_18_r1:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell alienware_14_r2 Affected: 0 , < 1.13.0 (semver)
        cpe:2.3:a:dell:alienware_14_r2:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell g15_5511 Affected: 0 , < 1.28.0 (semver)
        cpe:2.3:h:dell:g15_5511:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell g15_5530 Affected: 0 , < 1.14.0 (semver)
        cpe:2.3:h:dell:g15_5530:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell g16_7620 Affected: 0 , < 1.14.0 (semver)
        cpe:2.3:h:dell:g16_7620:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell g3_3500 Affected: 0 , < 1.29.0 (semver)
        cpe:2.3:h:dell:g3_3500:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell g5_5500 Affected: 0 , < 1.29.0 (semver)
        cpe:2.3:h:dell:g5_5500:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell g7_7500 Affected: 0 , < 1.31.0 (semver)
        cpe:2.3:h:dell:g7_7500:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell g7_7700 Affected: 0 , < 1.31.0 (semver)
        cpe:2.3:h:dell:g7_7700:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_13_5330 Affected: 0 , < 1.14.0 (semver)
        cpe:2.3:h:dell:inspiron_13_5330:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_15_3530 Affected: 0 , < 1.10.0 (semver)
        cpe:2.3:a:dell:inspiron_15_3530:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_3030s Affected: 0 , < 1.3.0 (semver)
        cpe:2.3:a:dell:inspiron_3030s:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_5301 Affected: 0 , < 1.32.0 (semver)
        cpe:2.3:h:dell:inspiron_5301:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_5400 Affected: 0 , < 1.27.0 (semver)
        cpe:2.3:h:dell:inspiron_5400:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_5401 Affected: 0 , < 1.27.0 (semver)
        cpe:2.3:h:dell:inspiron_5401:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_5402 Affected: 0 , < 1.29.0 (semver)
        cpe:2.3:h:dell:inspiron_5402:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_5409 Affected: 0 , < 1.29.0 (semver)
        cpe:2.3:h:dell:inspiron_5409:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_5502 Affected: 0 , < 1.29.0 (semver)
        cpe:2.3:h:dell:inspiron_5502:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_5509 Affected: 0 , < 1.29.0 (semver)
        cpe:2.3:h:dell:inspiron_5509:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_7300 Affected: - , < 1.32.0 (semver)
        cpe:2.3:h:dell:inspiron_7300:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_7400 Affected: 0 , < 1.32.0 (semver)
        cpe:2.3:h:dell:inspiron_7400:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell inspiron_7700_aio Affected: 0 , < 1.27.0 (semver)
        cpe:2.3:h:dell:inspiron_7700_aio:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_5310 Affected: 0 , < 1.23.0 (semver)
        cpe:2.3:h:dell:latitude_5310:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_5310_2_in_1 Affected: 0 , < 1.23.0 (semver)
        cpe:2.3:h:dell:latitude_5310_2_in_1:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_5330 Affected: 0 , < 1.321.0 (semver)
        cpe:2.3:h:dell:latitude_5330:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_5340 Affected: 0 , < 1.12.0 (semver)
        cpe:2.3:a:dell:latitude_5340:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_5531 Affected: - , < 1.22.0 (semver)
        cpe:2.3:h:dell:latitude_5531:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_5540 Affected: 0 , < 1.12.0 (semver)
        cpe:2.3:a:dell:latitude_5540:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_7320 Affected: - , < 1.34.0 (semver)
        cpe:2.3:h:dell:latitude_7320:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_7340 Affected: 0 , < 1.13.0 (semver)
        cpe:2.3:a:dell:latitude_7340:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_7420 Affected: - , < 1.34.0 (semver)
        cpe:2.3:h:dell:latitude_7420:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_7520 Affected: 0 , < 1.34.0 (semver)
        cpe:2.3:h:dell:latitude_7520:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_9330 Affected: 0 , < 1.19.0 (semver)
        cpe:2.3:h:dell:latitude_9330:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_9420 Affected: 0 , < 1.29.0 (semver)
        cpe:2.3:h:dell:latitude_9420:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_9430 Affected: - , < 1.22.0 (semver)
        cpe:2.3:h:dell:latitude_9430:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell latitude_9440_2in1 Affected: 0 , < 1.10.0 (semver)
        cpe:2.3:a:dell:latitude_9440_2in1:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell optiplex_micro_7010 Affected: 0 , < 1.13.1 (semver)
        cpe:2.3:h:dell:optiplex_micro_7010:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell optiplex_small_form_factor_7010 Affected: 0 , < 1.13.1 (semver)
        cpe:2.3:h:dell:optiplex_small_form_factor_7010:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell optiplex_tower_7010 Affected: 0 , < 1.13.1 (semver)
        cpe:2.3:h:dell:optiplex_tower_7010:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell precision_3440 Affected: 0 , < 1.25.0 (semver)
        cpe:2.3:h:dell:precision_3440:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell precision_3571 Affected: 0 , < 1.22.0 (semver)
        cpe:2.3:h:dell:precision_3571:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell precision_3580 Affected: 0 , < 1.12.0 (semver)
        cpe:2.3:a:dell:precision_3580:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell precision_3581 Affected: 0 , < 1.12.0 (semver)
        cpe:2.3:h:dell:precision_3581:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell precision_3660 Affected: - , < 2.13.0 (semver)
        cpe:2.3:h:dell:precision_3660:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell precision_5570 Affected: 0 , < 1.22.0 (semver)
        cpe:2.3:h:dell:precision_5570:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell precision_5750 Affected: 0 , < 1.29.0 (semver)
        cpe:2.3:h:dell:precision_5750:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell precision_5770 Affected: 0 , < 1.24.0 (semver)
        cpe:2.3:h:dell:precision_5770:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell vostro_14_3430 Affected: 0 , < 1.10.0 (semver)
        cpe:2.3:h:dell:vostro_14_3430:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell vostro_15_3530 Affected: 0 , < 1.10.0 (semver)
        cpe:2.3:h:dell:vostro_15_3530:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell vostro_3030s Affected: 0 , < 1.3.0 (semver)
        cpe:2.3:h:dell:vostro_3030s:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell vostro_5301 Affected: 0 , < 1.32.0 (semver)
        cpe:2.3:h:dell:vostro_5301:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell vostro_5402 Affected: 0 , < 1.29.0 (semver)
        cpe:2.3:h:dell:vostro_5402:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell vostro_5502 Affected: - , < 1.29.0 (semver)
        cpe:2.3:h:dell:vostro_5502:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell vostro_5880 Affected: 0 , < 1.25.0 (semver)
        cpe:2.3:h:dell:vostro_5880:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell xps_17_9700 Affected: 0 , < 1.24.0 (semver)
        cpe:2.3:h:dell:xps_17_9700:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell xps_17_9730 Affected: 0 , < 1.11.0 (semver)
        cpe:2.3:h:dell:xps_17_9730:-:*:*:*:*:*:*:*
    Create a notification for this product.
    dell xps_9315_2in1 Affected: 0 , < 1.15.0 (semver)
        cpe:2.3:h:dell:xps_9315_2in1:-:*:*:*:*:*:*:*
    Create a notification for this product.
    Date Public
    2024-04-09 06:30
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "affected": [
              {
                "cpes": [
                  "cpe:2.3:a:dell:alienware_16_r1:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "alienware_16_r1",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.13.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:dell:alienware_15_r6:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "alienware_15_r6",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.29.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:dell:alienware_18_r1:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "alienware_18_r1",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.16.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:dell:alienware_14_r2:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "alienware_14_r2",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.13.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:g15_5511:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "g15_5511",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.28.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:g15_5530:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "g15_5530",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.14.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:g16_7620:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "g16_7620",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.14.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:g3_3500:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "g3_3500",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.29.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:g5_5500:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "g5_5500",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.29.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:g7_7500:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "g7_7500",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.31.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:g7_7700:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "g7_7700",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.31.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:inspiron_13_5330:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "inspiron_13_5330",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.14.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:dell:inspiron_15_3530:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "inspiron_15_3530",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.10.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:dell:inspiron_3030s:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "inspiron_3030s",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.3.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:inspiron_5301:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "inspiron_5301",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.32.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:inspiron_5400:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "inspiron_5400",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.27.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:inspiron_5401:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "inspiron_5401",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.27.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:inspiron_5402:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "inspiron_5402",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.29.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:inspiron_5409:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "inspiron_5409",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.29.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:inspiron_5502:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "inspiron_5502",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.29.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:inspiron_5509:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "inspiron_5509",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.29.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:inspiron_7300:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "inspiron_7300",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.32.0",
                    "status": "affected",
                    "version": "-",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:inspiron_7400:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "inspiron_7400",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.32.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:inspiron_7700_aio:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "inspiron_7700_aio",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.27.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:latitude_5310:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "latitude_5310",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.23.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:latitude_5310_2_in_1:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "latitude_5310_2_in_1",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.23.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:latitude_5330:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "latitude_5330",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.321.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:dell:latitude_5340:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "latitude_5340",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.12.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:latitude_5531:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "latitude_5531",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.22.0",
                    "status": "affected",
                    "version": "-",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:dell:latitude_5540:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "latitude_5540",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.12.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:latitude_7320:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "latitude_7320",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.34.0",
                    "status": "affected",
                    "version": "-",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:dell:latitude_7340:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "latitude_7340",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.13.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:latitude_7420:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "latitude_7420",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.34.0",
                    "status": "affected",
                    "version": "-",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:latitude_7520:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "latitude_7520",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.34.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:latitude_9330:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "latitude_9330",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.19.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:latitude_9420:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "latitude_9420",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.29.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:latitude_9430:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "latitude_9430",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.22.0",
                    "status": "affected",
                    "version": "-",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:dell:latitude_9440_2in1:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "latitude_9440_2in1",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.10.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:optiplex_micro_7010:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "optiplex_micro_7010",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.13.1",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:optiplex_small_form_factor_7010:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "optiplex_small_form_factor_7010",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.13.1",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:optiplex_tower_7010:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "optiplex_tower_7010",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.13.1",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:precision_3440:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "precision_3440",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.25.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:precision_3571:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "precision_3571",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.22.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:dell:precision_3580:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "precision_3580",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.12.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:precision_3581:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "precision_3581",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.12.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:precision_3660:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "precision_3660",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "2.13.0",
                    "status": "affected",
                    "version": "-",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:precision_5570:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "precision_5570",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.22.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:precision_5750:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "precision_5750",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.29.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:precision_5770:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "precision_5770",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.24.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:vostro_14_3430:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "vostro_14_3430",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.10.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:vostro_15_3530:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "vostro_15_3530",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.10.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:vostro_3030s:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "vostro_3030s",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.3.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:vostro_5301:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "vostro_5301",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.32.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:vostro_5402:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "vostro_5402",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.29.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:vostro_5502:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "vostro_5502",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.29.0",
                    "status": "affected",
                    "version": "-",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:vostro_5880:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "vostro_5880",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.25.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:xps_17_9700:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "xps_17_9700",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.24.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:xps_17_9730:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "xps_17_9730",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.11.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:h:dell:xps_9315_2in1:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "xps_9315_2in1",
                "vendor": "dell",
                "versions": [
                  {
                    "lessThan": "1.15.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2024-22448",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-04-22T16:57:10.462584Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-06-04T17:52:58.050Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          },
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-01T22:43:34.907Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "vendor-advisory",
                  "x_transferred"
                ],
                "url": "https://www.dell.com/support/kbdoc/en-us/000221744/dsa-2024-066"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "CPG BIOS",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "1.29.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.16.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.13.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.28.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.14.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.0",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.1",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.2",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.3",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.4",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.5",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.6",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.7",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.8",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.9",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.10",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.11",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.12",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.13",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.14",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.15",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.31.16",
                  "status": "affected",
                  "version": "N/A",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "value": "Dell Technologies would like to thank Eason for reporting this issue."
            }
          ],
          "datePublic": "2024-04-09T06:30:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service."
                }
              ],
              "value": "Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 4.7,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "LOW",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-787",
                  "description": "CWE-787: Out-of-bounds Write",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2024-04-10T07:30:08.507Z",
            "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
            "shortName": "dell"
          },
          "references": [
            {
              "tags": [
                "vendor-advisory"
              ],
              "url": "https://www.dell.com/support/kbdoc/en-us/000221744/dsa-2024-066"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "assignerShortName": "dell",
        "cveId": "CVE-2024-22448",
        "datePublished": "2024-04-10T07:30:08.507Z",
        "dateReserved": "2024-01-10T15:26:10.250Z",
        "dateUpdated": "2024-08-01T22:43:34.907Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2022-26861 (GCVE-0-2022-26861)

    Vulnerability from cvelistv5 – Published: 2022-09-06 20:15 – Updated: 2026-05-27 13:03
    VLAI
    Summary
    Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could exploit this vulnerability by sending malicious input via SMI to obtain arbitrary code execution during SMM.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2025-06-11 17:56 UTC
    CWE
    • CWE-1038 - Insecure Automated Optimizations
    Assigner
    dell CNA under the mitre root
    CNA scorecard C 70/100 over 459 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Dell CPG BIOS Affected: unspecified , < Gen7, Gen8, Gen9, Gen10, Gen11, 21Q1-Q4 (custom)
    Create a notification for this product.
    Date Public
    2022-08-04 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-03T05:18:37.970Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://www.dell.com/support/kbdoc/000202194"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2022-26861",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2025-06-11T17:56:14.298041Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-27T13:03:13.475Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "CPG BIOS",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "Gen7, Gen8, Gen9, Gen10, Gen11, 21Q1-Q4",
                  "status": "affected",
                  "version": "unspecified",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "datePublic": "2022-08-04T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could exploit this vulnerability by sending malicious input via SMI to obtain arbitrary code execution during SMM."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 7.9,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-1038",
                  "description": "CWE-1038: Insecure Automated Optimizations",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2022-09-06T20:15:20.000Z",
            "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
            "shortName": "dell"
          },
          "references": [
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://www.dell.com/support/kbdoc/000202194"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "secure@dell.com",
              "DATE_PUBLIC": "2022-08-04",
              "ID": "CVE-2022-26861",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "CPG BIOS",
                          "version": {
                            "version_data": [
                              {
                                "version_affected": "\u003c",
                                "version_value": "Gen7, Gen8, Gen9, Gen10, Gen11, 21Q1-Q4"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "Dell"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could exploit this vulnerability by sending malicious input via SMI to obtain arbitrary code execution during SMM."
                }
              ]
            },
            "impact": {
              "cvss": {
                "baseScore": 7.9,
                "baseSeverity": "High",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
                "version": "3.1"
              }
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "CWE-1038: Insecure Automated Optimizations"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "https://www.dell.com/support/kbdoc/000202194",
                  "refsource": "MISC",
                  "url": "https://www.dell.com/support/kbdoc/000202194"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "assignerShortName": "dell",
        "cveId": "CVE-2022-26861",
        "datePublished": "2022-09-06T20:15:20.148Z",
        "dateReserved": "2022-03-10T00:00:00.000Z",
        "dateUpdated": "2026-05-27T13:03:13.475Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2022-26860 (GCVE-0-2022-26860)

    Vulnerability from cvelistv5 – Published: 2022-09-06 20:15 – Updated: 2026-05-27 13:02
    VLAI
    Summary
    Dell BIOS versions contain a stack-based buffer overflow vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI to bypass security checks resulting in arbitrary code execution in SMM.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2025-06-11 18:01 UTC
    CWE
    • CWE-121 - Stack-based Buffer Overflow
    Assigner
    dell CNA under the mitre root
    CNA scorecard C 70/100 over 459 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Dell CPG BIOS Affected: unspecified , < All (custom)
    Create a notification for this product.
    Date Public
    2022-08-04 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-03T05:18:38.162Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://www.dell.com/support/kbdoc/000202194"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2022-26860",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2025-06-11T18:01:11.510619Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-27T13:02:18.581Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "CPG BIOS",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "All",
                  "status": "affected",
                  "version": "unspecified",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "datePublic": "2022-08-04T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Dell BIOS versions contain a stack-based buffer overflow vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI to bypass security checks resulting in arbitrary code execution in SMM."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-121",
                  "description": "CWE-121: Stack-based Buffer Overflow",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2022-09-06T20:15:19.000Z",
            "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
            "shortName": "dell"
          },
          "references": [
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://www.dell.com/support/kbdoc/000202194"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "secure@dell.com",
              "DATE_PUBLIC": "2022-08-04",
              "ID": "CVE-2022-26860",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "CPG BIOS",
                          "version": {
                            "version_data": [
                              {
                                "version_affected": "\u003c",
                                "version_value": "All"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "Dell"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Dell BIOS versions contain a stack-based buffer overflow vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI to bypass security checks resulting in arbitrary code execution in SMM."
                }
              ]
            },
            "impact": {
              "cvss": {
                "baseScore": 7.5,
                "baseSeverity": "High",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.1"
              }
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "CWE-121: Stack-based Buffer Overflow"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "https://www.dell.com/support/kbdoc/000202194",
                  "refsource": "MISC",
                  "url": "https://www.dell.com/support/kbdoc/000202194"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "assignerShortName": "dell",
        "cveId": "CVE-2022-26860",
        "datePublished": "2022-09-06T20:15:19.312Z",
        "dateReserved": "2022-03-10T00:00:00.000Z",
        "dateUpdated": "2026-05-27T13:02:18.581Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2022-26859 (GCVE-0-2022-26859)

    Vulnerability from cvelistv5 – Published: 2022-09-06 20:15 – Updated: 2026-05-27 13:02
    VLAI
    Summary
    Dell BIOS contains a race condition vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI in order to bypass security checks during SMM.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2025-06-11 18:25 UTC
    CWE
    • CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition
    Assigner
    dell CNA under the mitre root
    CNA scorecard C 70/100 over 459 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Dell CPG BIOS Affected: unspecified , < All (custom)
    Create a notification for this product.
    Date Public
    2022-08-04 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-03T05:18:37.781Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://www.dell.com/support/kbdoc/000202194"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2022-26859",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2025-06-11T18:25:46.865745Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-27T13:02:46.738Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "CPG BIOS",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "All",
                  "status": "affected",
                  "version": "unspecified",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "datePublic": "2022-08-04T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Dell BIOS contains a race condition vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI in order to bypass security checks during SMM."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 6.1,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "LOW",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-367",
                  "description": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2022-09-06T20:15:18.000Z",
            "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
            "shortName": "dell"
          },
          "references": [
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://www.dell.com/support/kbdoc/000202194"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "secure@dell.com",
              "DATE_PUBLIC": "2022-08-04",
              "ID": "CVE-2022-26859",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "CPG BIOS",
                          "version": {
                            "version_data": [
                              {
                                "version_affected": "\u003c",
                                "version_value": "All"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "Dell"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Dell BIOS contains a race condition vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI in order to bypass security checks during SMM."
                }
              ]
            },
            "impact": {
              "cvss": {
                "baseScore": 6.1,
                "baseSeverity": "Medium",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N",
                "version": "3.1"
              }
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "https://www.dell.com/support/kbdoc/000202194",
                  "refsource": "MISC",
                  "url": "https://www.dell.com/support/kbdoc/000202194"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "assignerShortName": "dell",
        "cveId": "CVE-2022-26859",
        "datePublished": "2022-09-06T20:15:18.435Z",
        "dateReserved": "2022-03-10T00:00:00.000Z",
        "dateUpdated": "2026-05-27T13:02:46.738Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2022-26858 (GCVE-0-2022-26858)

    Vulnerability from cvelistv5 – Published: 2022-09-06 20:15 – Updated: 2026-05-27 12:57
    VLAI
    Summary
    Dell BIOS versions contain an Improper Authentication vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2025-06-11 16:10 UTC
    CWE
    • CWE-287 - Improper Authentication
    Assigner
    dell CNA under the mitre root
    CNA scorecard C 70/100 over 459 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Dell CPG BIOS Affected: unspecified , < All (custom)
    Create a notification for this product.
    Date Public
    2022-08-04 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-03T05:18:37.924Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://www.dell.com/support/kbdoc/000202194"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2022-26858",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2025-06-11T16:10:14.406568Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-27T12:57:23.397Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "CPG BIOS",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "All",
                  "status": "affected",
                  "version": "unspecified",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "datePublic": "2022-08-04T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Dell BIOS versions contain an Improper Authentication vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 6.1,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "LOW",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:N",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-287",
                  "description": "CWE-287: Improper Authentication",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2022-09-06T20:15:17.000Z",
            "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
            "shortName": "dell"
          },
          "references": [
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://www.dell.com/support/kbdoc/000202194"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "secure@dell.com",
              "DATE_PUBLIC": "2022-08-04",
              "ID": "CVE-2022-26858",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "CPG BIOS",
                          "version": {
                            "version_data": [
                              {
                                "version_affected": "\u003c",
                                "version_value": "All"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "Dell"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Dell BIOS versions contain an Improper Authentication vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls."
                }
              ]
            },
            "impact": {
              "cvss": {
                "baseScore": 6.1,
                "baseSeverity": "Medium",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:N",
                "version": "3.1"
              }
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "CWE-287: Improper Authentication"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "https://www.dell.com/support/kbdoc/000202194",
                  "refsource": "MISC",
                  "url": "https://www.dell.com/support/kbdoc/000202194"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "assignerShortName": "dell",
        "cveId": "CVE-2022-26858",
        "datePublished": "2022-09-06T20:15:17.414Z",
        "dateReserved": "2022-03-10T00:00:00.000Z",
        "dateUpdated": "2026-05-27T12:57:23.397Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2022-22567 (GCVE-0-2022-22567)

    Vulnerability from cvelistv5 – Published: 2022-02-09 20:00 – Updated: 2024-09-16 20:51
    VLAI
    Summary
    Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient verification of data authenticity vulnerability. An authenticated malicious user may exploit this vulnerability in order to install modified BIOS firmware.
    CWE
    • CWE-345 - Insufficient Verification of Data Authenticity
    Assigner
    dell CNA under the mitre root
    CNA scorecard C 70/100 over 459 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Dell CPG BIOS Affected: unspecified , < 1.15 (custom)
    Create a notification for this product.
    Date Public
    2022-02-07 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-03T03:14:55.853Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://www.dell.com/support/kbdoc/en-us/000195905/dsa-2022-028"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "CPG BIOS",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "1.15",
                  "status": "affected",
                  "version": "unspecified",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "datePublic": "2022-02-07T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient verification of data authenticity vulnerability. An authenticated malicious user may exploit this vulnerability in order to install modified BIOS firmware."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "LOW",
                "baseScore": 4.7,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:L",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-345",
                  "description": "CWE-345: Insufficient Verification of Data Authenticity",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2022-02-09T20:00:16.000Z",
            "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
            "shortName": "dell"
          },
          "references": [
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://www.dell.com/support/kbdoc/en-us/000195905/dsa-2022-028"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "secure@dell.com",
              "DATE_PUBLIC": "2022-02-07",
              "ID": "CVE-2022-22567",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "CPG BIOS",
                          "version": {
                            "version_data": [
                              {
                                "version_affected": "\u003c",
                                "version_value": "1.15"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "Dell"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient verification of data authenticity vulnerability. An authenticated malicious user may exploit this vulnerability in order to install modified BIOS firmware."
                }
              ]
            },
            "impact": {
              "cvss": {
                "baseScore": 4.7,
                "baseSeverity": "Medium",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:L",
                "version": "3.1"
              }
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "CWE-345: Insufficient Verification of Data Authenticity"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "https://www.dell.com/support/kbdoc/en-us/000195905/dsa-2022-028",
                  "refsource": "MISC",
                  "url": "https://www.dell.com/support/kbdoc/en-us/000195905/dsa-2022-028"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "assignerShortName": "dell",
        "cveId": "CVE-2022-22567",
        "datePublished": "2022-02-09T20:00:16.918Z",
        "dateReserved": "2022-01-04T00:00:00.000Z",
        "dateUpdated": "2024-09-16T20:51:53.564Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2022-22566 (GCVE-0-2022-22566)

    Vulnerability from cvelistv5 – Published: 2022-02-09 20:00 – Updated: 2024-09-17 01:45
    VLAI
    Summary
    Select Dell Client Commercial and Consumer platforms contain a pre-boot direct memory access (DMA) vulnerability. An authenticated attacker with physical access to the system may potentially exploit this vulnerability in order to execute arbitrary code on the device.
    CWE
    • CWE-1190 - DMA Device Enabled Too Early in Boot Phase
    Assigner
    dell CNA under the mitre root
    CNA scorecard C 70/100 over 459 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Dell CPG BIOS Affected: unspecified , < 1.15 (custom)
    Create a notification for this product.
    Date Public
    2022-02-07 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-03T03:14:55.765Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://www.dell.com/support/kbdoc/en-us/000195905/dsa-2022-028"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "CPG BIOS",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "1.15",
                  "status": "affected",
                  "version": "unspecified",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "datePublic": "2022-02-07T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Select Dell Client Commercial and Consumer platforms contain a pre-boot direct memory access (DMA) vulnerability. An authenticated attacker with physical access to the system may potentially exploit this vulnerability in order to execute arbitrary code on the device."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "PHYSICAL",
                "availabilityImpact": "HIGH",
                "baseScore": 6.9,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-1190",
                  "description": "CWE-1190: DMA Device Enabled Too Early in Boot Phase",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2022-02-09T20:00:15.000Z",
            "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
            "shortName": "dell"
          },
          "references": [
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://www.dell.com/support/kbdoc/en-us/000195905/dsa-2022-028"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "secure@dell.com",
              "DATE_PUBLIC": "2022-02-07",
              "ID": "CVE-2022-22566",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "CPG BIOS",
                          "version": {
                            "version_data": [
                              {
                                "version_affected": "\u003c",
                                "version_value": "1.15"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "Dell"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Select Dell Client Commercial and Consumer platforms contain a pre-boot direct memory access (DMA) vulnerability. An authenticated attacker with physical access to the system may potentially exploit this vulnerability in order to execute arbitrary code on the device."
                }
              ]
            },
            "impact": {
              "cvss": {
                "baseScore": 6.9,
                "baseSeverity": "Medium",
                "vectorString": "CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.1"
              }
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "CWE-1190: DMA Device Enabled Too Early in Boot Phase"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "https://www.dell.com/support/kbdoc/en-us/000195905/dsa-2022-028",
                  "refsource": "MISC",
                  "url": "https://www.dell.com/support/kbdoc/en-us/000195905/dsa-2022-028"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "assignerShortName": "dell",
        "cveId": "CVE-2022-22566",
        "datePublished": "2022-02-09T20:00:15.542Z",
        "dateReserved": "2022-01-04T00:00:00.000Z",
        "dateUpdated": "2024-09-17T01:45:36.114Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2021-36342 (GCVE-0-2021-36342)

    Vulnerability from cvelistv5 – Published: 2022-01-24 20:10 – Updated: 2026-10-07 18:49
    VLAI
    Summary
    Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-07 18:48 UTC
    CWE
    • CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
    Assigner
    dell CNA under the mitre root
    CNA scorecard C 70/100 over 459 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Dell CPG BIOS Affected: unspecified , < 1.14 (custom)
    Create a notification for this product.
    Date Public
    2021-01-12 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-04T00:54:51.436Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://www.dell.com/support/kbdoc/en-us/000193321/dsa-2021-240"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2021-36342",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-10-07T18:48:59.560829Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-10-07T18:49:16.815Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "CPG BIOS",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "1.14",
                  "status": "affected",
                  "version": "unspecified",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "datePublic": "2021-01-12T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-119",
                  "description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2022-01-24T20:10:18.000Z",
            "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
            "shortName": "dell"
          },
          "references": [
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://www.dell.com/support/kbdoc/en-us/000193321/dsa-2021-240"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "secure@dell.com",
              "DATE_PUBLIC": "2021-01-12",
              "ID": "CVE-2021-36342",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "CPG BIOS",
                          "version": {
                            "version_data": [
                              {
                                "version_affected": "\u003c",
                                "version_value": "1.14"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "Dell"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM."
                }
              ]
            },
            "impact": {
              "cvss": {
                "baseScore": 7.5,
                "baseSeverity": "High",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.1"
              }
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "https://www.dell.com/support/kbdoc/en-us/000193321/dsa-2021-240",
                  "refsource": "MISC",
                  "url": "https://www.dell.com/support/kbdoc/en-us/000193321/dsa-2021-240"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "assignerShortName": "dell",
        "cveId": "CVE-2021-36342",
        "datePublished": "2022-01-24T20:10:18.115Z",
        "dateReserved": "2021-07-08T00:00:00.000Z",
        "dateUpdated": "2026-10-07T18:49:16.815Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2021-21574 (GCVE-0-2021-21574)

    Vulnerability from cvelistv5 – Published: 2021-06-24 17:00 – Updated: 2024-09-16 21:08
    VLAI
    Summary
    Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions.
    CWE
    • CWE-121 - Stack-based Buffer Overflow
    Assigner
    dell CNA under the mitre root
    CNA scorecard C 70/100 over 459 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Dell BIOSConnect Affected: unspecified , < Gen 11, Gen 10 (custom)
    Create a notification for this product.
    Date Public
    2021-06-24 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-03T18:16:23.464Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://www.dell.com/support/kbdoc/en-us/000188682"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "BIOSConnect",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "Gen 11, Gen 10",
                  "status": "affected",
                  "version": "unspecified",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "datePublic": "2021-06-24T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-121",
                  "description": "CWE-121: Stack-based Buffer Overflow",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2021-06-24T17:00:19.000Z",
            "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
            "shortName": "dell"
          },
          "references": [
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://www.dell.com/support/kbdoc/en-us/000188682"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "secure@dell.com",
              "DATE_PUBLIC": "2021-06-24",
              "ID": "CVE-2021-21574",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "BIOSConnect",
                          "version": {
                            "version_data": [
                              {
                                "version_affected": "\u003c",
                                "version_value": "Gen 11, Gen 10"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "Dell"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions."
                }
              ]
            },
            "impact": {
              "cvss": {
                "baseScore": 7.2,
                "baseSeverity": "High",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
                "version": "3.1"
              }
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "CWE-121: Stack-based Buffer Overflow"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "https://www.dell.com/support/kbdoc/en-us/000188682",
                  "refsource": "MISC",
                  "url": "https://www.dell.com/support/kbdoc/en-us/000188682"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "assignerShortName": "dell",
        "cveId": "CVE-2021-21574",
        "datePublished": "2021-06-24T17:00:19.574Z",
        "dateReserved": "2021-01-04T00:00:00.000Z",
        "dateUpdated": "2024-09-16T21:08:05.986Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2021-21573 (GCVE-0-2021-21573)

    Vulnerability from cvelistv5 – Published: 2021-06-24 17:00 – Updated: 2024-09-17 01:11
    VLAI
    Summary
    Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions.
    CWE
    • CWE-121 - Stack-based Buffer Overflow
    Assigner
    dell CNA under the mitre root
    CNA scorecard C 70/100 over 459 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Dell BIOSConnect Affected: unspecified , < Gen 11, Gen 10 (custom)
    Create a notification for this product.
    Date Public
    2021-06-24 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-03T18:16:23.393Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://www.dell.com/support/kbdoc/en-us/000188682"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "BIOSConnect",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "Gen 11, Gen 10",
                  "status": "affected",
                  "version": "unspecified",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "datePublic": "2021-06-24T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-121",
                  "description": "CWE-121: Stack-based Buffer Overflow",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2021-06-24T17:00:18.000Z",
            "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
            "shortName": "dell"
          },
          "references": [
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://www.dell.com/support/kbdoc/en-us/000188682"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "secure@dell.com",
              "DATE_PUBLIC": "2021-06-24",
              "ID": "CVE-2021-21573",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "BIOSConnect",
                          "version": {
                            "version_data": [
                              {
                                "version_affected": "\u003c",
                                "version_value": "Gen 11, Gen 10"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "Dell"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions."
                }
              ]
            },
            "impact": {
              "cvss": {
                "baseScore": 7.2,
                "baseSeverity": "High",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
                "version": "3.1"
              }
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "CWE-121: Stack-based Buffer Overflow"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "https://www.dell.com/support/kbdoc/en-us/000188682",
                  "refsource": "MISC",
                  "url": "https://www.dell.com/support/kbdoc/en-us/000188682"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "assignerShortName": "dell",
        "cveId": "CVE-2021-21573",
        "datePublished": "2021-06-24T17:00:18.090Z",
        "dateReserved": "2021-01-04T00:00:00.000Z",
        "dateUpdated": "2024-09-17T01:11:41.809Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2021-21572 (GCVE-0-2021-21572)

    Vulnerability from cvelistv5 – Published: 2021-06-24 17:00 – Updated: 2024-09-16 19:30
    VLAI
    Summary
    Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions.
    CWE
    • CWE-122 - Heap-based Buffer Overflow
    Assigner
    dell CNA under the mitre root
    CNA scorecard C 70/100 over 459 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Dell BIOSConnect Affected: unspecified , < Gen 11, Gen 10 (custom)
    Create a notification for this product.
    Date Public
    2021-06-24 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-03T18:16:23.404Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://www.dell.com/support/kbdoc/en-us/000188682"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "BIOSConnect",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "Gen 11, Gen 10",
                  "status": "affected",
                  "version": "unspecified",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "datePublic": "2021-06-24T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-122",
                  "description": "CWE-122: Heap-based Buffer Overflow",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2021-06-24T17:00:16.000Z",
            "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
            "shortName": "dell"
          },
          "references": [
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://www.dell.com/support/kbdoc/en-us/000188682"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "secure@dell.com",
              "DATE_PUBLIC": "2021-06-24",
              "ID": "CVE-2021-21572",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "BIOSConnect",
                          "version": {
                            "version_data": [
                              {
                                "version_affected": "\u003c",
                                "version_value": "Gen 11, Gen 10"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "Dell"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions."
                }
              ]
            },
            "impact": {
              "cvss": {
                "baseScore": 7.2,
                "baseSeverity": "High",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
                "version": "3.1"
              }
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "CWE-122: Heap-based Buffer Overflow"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "https://www.dell.com/support/kbdoc/en-us/000188682",
                  "refsource": "MISC",
                  "url": "https://www.dell.com/support/kbdoc/en-us/000188682"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "assignerShortName": "dell",
        "cveId": "CVE-2021-21572",
        "datePublished": "2021-06-24T17:00:16.600Z",
        "dateReserved": "2021-01-04T00:00:00.000Z",
        "dateUpdated": "2024-09-16T19:30:31.142Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2021-21571 (GCVE-0-2021-21571)

    Vulnerability from cvelistv5 – Published: 2021-06-24 17:00 – Updated: 2024-09-16 17:14
    VLAI
    Summary
    Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability using a person-in-the-middle attack which may lead to a denial of service and payload tampering.
    CWE
    • CWE-295 - Improper Certificate Validation
    Assigner
    dell CNA under the mitre root
    CNA scorecard C 70/100 over 459 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Dell UEFI BIOS https stack Affected: Gen 11, Gen 10
    Create a notification for this product.
    Date Public
    2021-06-24 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-03T18:16:23.284Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://www.dell.com/support/kbdoc/en-us/000188682"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "UEFI BIOS https stack",
              "vendor": "Dell",
              "versions": [
                {
                  "status": "affected",
                  "version": "Gen 11, Gen 10"
                }
              ]
            }
          ],
          "datePublic": "2021-06-24T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability using a person-in-the-middle attack which may lead to a denial of service and payload tampering."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 5.9,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "LOW",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-295",
                  "description": "CWE-295: Improper Certificate Validation",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2021-06-24T17:00:14.000Z",
            "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
            "shortName": "dell"
          },
          "references": [
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://www.dell.com/support/kbdoc/en-us/000188682"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "secure@dell.com",
              "DATE_PUBLIC": "2021-06-24",
              "ID": "CVE-2021-21571",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "UEFI BIOS https stack",
                          "version": {
                            "version_data": [
                              {
                                "version_affected": "=",
                                "version_value": "Gen 11, Gen 10"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "Dell"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability using a person-in-the-middle attack which may lead to a denial of service and payload tampering."
                }
              ]
            },
            "impact": {
              "cvss": {
                "baseScore": 5.9,
                "baseSeverity": "Medium",
                "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H",
                "version": "3.1"
              }
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "CWE-295: Improper Certificate Validation"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "https://www.dell.com/support/kbdoc/en-us/000188682",
                  "refsource": "MISC",
                  "url": "https://www.dell.com/support/kbdoc/en-us/000188682"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "assignerShortName": "dell",
        "cveId": "CVE-2021-21571",
        "datePublished": "2021-06-24T17:00:15.004Z",
        "dateReserved": "2021-01-04T00:00:00.000Z",
        "dateUpdated": "2024-09-16T17:14:18.169Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }